@github/copilot - npm Package Compare versions

Copyleft license information was found.

Found 1 instance in 1 package

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 22 instances in 1 package

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

AI has identified unusual behaviors that may pose a security risk.

Found 2 instances in 1 package

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

Found 3 instances in 1 package

Package contains multiple licenses.

Found 1 instance in 1 package

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

A license not known to be considered permissive was found.

Found 1 instance in 1 package

Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package