@goreleaser/mcp
Advanced tools
@goreleaser/mcp - npm Package Compare versions
New alerts
AI-detected potential security risk
Supply chain riskAI has determined that this package may contain potential security issues or vulnerabilities.
Network access
Supply chain riskThis module accesses the network.
Found 2 instances
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Fixed alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Improved metrics
- Total package byte prevSize
12950
8.35%- Dependency count
3
-25%- Lines of code
240
16.5%- Number of low supply chain risk alerts
1
-50%- Is type module
Yes
NaNWorsened metrics
- Number of medium supply chain risk alerts
4
300%Dependency changes
+ Added
agent-base@8.0.0(transitive)+ Added
data-uri-to-buffer@7.0.0(transitive)+ Added
degenerator@6.0.0(transitive)+ Added
get-uri@7.0.0(transitive)+ Added
http-proxy-agent@8.0.0(transitive)+ Added
https-proxy-agent@8.0.0(transitive)+ Added
jszip@3.10.1(transitive)+ Added
pac-proxy-agent@8.0.0(transitive)+ Added
pac-resolver@8.0.0(transitive)+ Added
proxy-agent@7.0.0(transitive)+ Added
quickjs-wasi@0.0.1(transitive)+ Added
socks-proxy-agent@9.0.0(transitive)+ Added
tar@7.5.13(transitive)- Removed
axios@^1.8.2- Removed
@tootallnate/quickjs-emscripten@0.23.0(transitive)- Removed
agent-base@6.0.27.1.4(transitive)- Removed
async-function@1.0.0(transitive)- Removed
async-generator-function@1.0.0(transitive)- Removed
asynckit@0.4.0(transitive)- Removed
axios@1.20.0(transitive)- Removed
call-bind-apply-helpers@1.0.2(transitive)- Removed
combined-stream@1.0.8(transitive)- Removed
data-uri-to-buffer@6.0.2(transitive)- Removed
degenerator@5.0.1(transitive)- Removed
delayed-stream@1.0.0(transitive)- Removed
dunder-proto@1.0.1(transitive)- Removed
es-define-property@1.0.1(transitive)- Removed
es-errors@1.3.0(transitive)- Removed
es-object-atoms@1.1.2(transitive)- Removed
es-set-tostringtag@2.1.0(transitive)- Removed
follow-redirects@1.16.0(transitive)- Removed
form-data@4.0.6(transitive)- Removed
function-bind@1.1.2(transitive)- Removed
generator-function@2.0.1(transitive)- Removed
get-intrinsic@1.3.1(transitive)- Removed
get-proto@1.0.1(transitive)- Removed
get-uri@6.0.5(transitive)- Removed
gopd@1.2.0(transitive)- Removed
has-symbols@1.1.0(transitive)- Removed
has-tostringtag@1.0.2(transitive)- Removed
hasown@2.0.4(transitive)- Removed
http-proxy-agent@7.0.2(transitive)- Removed
https-proxy-agent@5.0.17.0.6(transitive)- Removed
jszip@3.10.2(transitive)- Removed
math-intrinsics@1.1.0(transitive)- Removed
mime-db@1.52.0(transitive)- Removed
mime-types@2.1.35(transitive)- Removed
pac-proxy-agent@7.2.0(transitive)- Removed
pac-resolver@7.0.1(transitive)- Removed
proxy-agent@6.5.0(transitive)- Removed
proxy-from-env@2.1.0(transitive)- Removed
socks-proxy-agent@8.0.5(transitive)- Removed
tar@7.5.22(transitive)Updated
jszip@3.10.1Updated
proxy-agent@7.0.0Updated
tar@7.5.13