@goldskycom/cli - npm Package Compare versions

Comparing version 0.4.0 to 0.5.0

package.json

 {
   "name": "@goldskycom/cli",
-  "version": "0.4.0",
+  "version": "0.5.0",
   "description": "The Goldsky CLI to deploy subgraphs, index & transform blockchain data, configure webhooks, and access your data in real-time.",
@@ -37,2 +37,3 @@ "main": "dist/index.js",
     "@types/node": "^16.11.11",
+    "@types/readline-sync": "^1.4.4",
     "@types/update-notifier": "^6.0.1",
@@ -52,4 +53,5 @@ "@types/yaml": "^1.9.7",
   "dependencies": {
+    "readline-sync": "^1.4.10",
     "update-notifier": "^6.0.2"
   }
 }

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 8 instances in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

719606

increased by3.1%

Lines of code

2775

increased by3.2%

Worsened metrics

Dependency count

2

increased by100%

Dev dependency count

17

increased by6.25%

Number of low supply chain risk alerts

57

increased by26.67%

Number of medium supply chain risk alerts

10

increased by11.11%

Dependency changes

• + Addedreadline-sync@^1.4.10

• + Addedreadline-sync@1.4.10(transitive)