@epilot360/illustrations
Advanced tools
@epilot360/illustrations - npm Package Compare versions
New alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Fixed alerts
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Number of low supply chain risk alerts
1
-97.5%Worsened metrics
- Total package byte prevSize
7280
-99.22%- Number of package files
2
-96.08%- Lines of code
0
-100%- Number of low quality alerts
3
50%- Number of medium supply chain risk alerts
3
200%