@eggjs/tegg-metadata - npm Package Compare versions

Comparing version 3.78.14 to 3.78.15

package.json

 {
   "name": "@eggjs/tegg-metadata",
-  "version": "3.78.14",
+  "version": "3.78.15",
   "description": "tegg metadata",
@@ -38,6 +38,6 @@ "keywords": [
   "dependencies": {
-    "@eggjs/core-decorator": "^3.78.14",
-    "@eggjs/tegg-common-util": "^3.78.14",
-    "@eggjs/tegg-lifecycle": "^3.78.14",
-    "@eggjs/tegg-types": "^3.78.14",
+    "@eggjs/core-decorator": "^3.78.15",
+    "@eggjs/tegg-common-util": "^3.78.15",
+    "@eggjs/tegg-lifecycle": "^3.78.15",
+    "@eggjs/tegg-types": "^3.78.15",
     "egg-errors": "^2.2.3"
@@ -58,3 +58,3 @@ },
   },
-  "gitHead": "9e8c9f39363a8f88e983c12bcc73fa4e18a9da2d"
+  "gitHead": "0ece332df20045c19678fd191f35611ce257681e"
 }

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

No metric changes

Dependency changes

• Updated

  @eggjs/core-decorator@^3.78.15

• Updated

  @eggjs/tegg-common-util@^3.78.15

• Updated

  @eggjs/tegg-lifecycle@^3.78.15

• Updated

  @eggjs/tegg-types@^3.78.15