@firebase/util - npm Package Compare versions

Comparing version 1.10.3-canary.721e5a7e9 to 1.10.3-canary.777f465ff

package.json

 {
   "name": "@firebase/util",
-  "version": "1.10.3-canary.721e5a7e9",
+  "version": "1.10.3-canary.777f465ff",
   "description": "",
@@ -25,3 +25,4 @@ "author": "Firebase <[e-mail]> (https://firebase.google.com/)",
   "files": [
-    "dist"
+    "dist",
+    "postinstall.js"
   ],
@@ -42,3 +43,4 @@ "scripts": {
     "api-report": "api-extractor run --local --verbose",
-    "typings:public": "node ../../scripts/build/use_typings.js ./dist/util-public.d.ts"
+    "typings:public": "node ../../scripts/build/use_typings.js ./dist/util-public.d.ts",
+    "postinstall": "node ./postinstall.js"
   },
@@ -50,2 +52,3 @@ "license": "Apache-2.0",
   "devDependencies": {
+    "@rollup/plugin-replace": "6.0.2",
     "rollup": "2.79.2",
@@ -52,0 +55,0 @@ "rollup-plugin-typescript2": "0.36.0",

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 8 instances in 1 package

Improved metrics

Total package byte prevSize

1388957

increased by50.48%

Number of package files

87

increased by6.1%

Lines of code

12798

increased by1.77%

Worsened metrics

Dev dependency count

4

increased by33.33%

Number of high supply chain risk alerts

1

increased byInfinity%

Number of low supply chain risk alerts

14

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes