@fnpm-io/cli - npm Package Compare versions

Comparing version 0.5.0 to 0.5.3

package.json

 {
   "name": "@fnpm-io/cli",
-  "version": "0.5.0",
+  "version": "0.5.3",
   "description": "FNPM CLI Tool.",
@@ -13,7 +13,2 @@ "private": false,
   "type": "module",
-  "scripts": {
-    "dev": "swc ./src -d ./build --watch",
-    "build": "swc ./src -d ./build",
-    "publish-pkg": "pnpm run build && npm publish"
-  },
   "files": [
@@ -30,2 +25,3 @@ "build"
     "axios": "0.27.2",
+    "bin-links": "3.0.3",
     "chalk": "5.0.1",
@@ -35,2 +31,3 @@ "execa": "6.1.0",
     "markdown-table": "3.0.2",
+    "npm-pick-manifest": "7.0.2",
     "ora": "6.1.2",
@@ -40,14 +37,19 @@ "pacote": "13.6.2",
     "read-package-json-fast": "2.0.3",
-    "npm-pick-manifest": "7.0.2",
     "semver": "7.3.7"
   },
   "devDependencies": {
+    "@swc/cli": "0.1.57",
+    "@swc/core": "1.2.242",
     "@types/glob": "7.2.0",
+    "@types/mv": "2.1.2",
     "@types/pacote": "11.1.5",
-    "@types/prompts": "^2.0.14",
+    "@types/prompts": "2.0.14",
     "@types/semver": "7.3.12",
-    "@swc/cli": "0.1.57",
-    "@swc/core": "1.2.242",
-    "@types/mv": "2.1.2"
+    "chokidar": "3.5.3"
+  },
+  "scripts": {
+    "dev": "swc ./src -d ./build --watch",
+    "build": "swc ./src -d ./build",
+    "publish-pkg": "pnpm run build && npm publish"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

2

decreased by-60%

Worsened metrics

Total package byte prevSize

4112

decreased by-93.96%

Dependency count

12

increased by9.09%

Dev dependency count

8

increased by14.29%

Number of package files

3

decreased by-92.5%

Number of low license alerts

1

increased byInfinity%

Lines of code

0

decreased by-100%

Dependency changes

• + Addedbin-links@3.0.3

• + Addedbin-links@3.0.3(transitive)

• + Addedcmd-shim@5.0.0(transitive)

• + Addedmkdirp-infer-owner@2.0.0(transitive)

• + Addedread-cmd-shim@3.0.1(transitive)

• + Addedwrite-file-atomic@4.0.2(transitive)