@grown/cli - npm Package Compare versions

Comparing version 0.0.90 to 0.0.91

package.json

 {
   "name": "@grown/cli",
-  "version": "0.0.90",
+  "version": "0.0.91",
   "main": "index.js",
@@ -25,4 +25,4 @@ "author": "Alvaro Cabrera <[e-mail]>",
     "@grown/bud": "^0.0.66",
-    "@grown/logger": "^0.0.24",
-    "@grown/repl": "^0.0.29",
+    "@grown/logger": "^0.0.25",
+    "@grown/repl": "^0.0.30",
     "fastest-levenshtein": "^1.0.12",
@@ -37,3 +37,3 @@ "fs-extra": "~9.1.0",
   },
-  "gitHead": "e1547e15b3cb36a948ba0f28260ad846e4b57a19"
+  "gitHead": "d198641db1f3d935eea1643f6653b8b50096dfdb"
 }

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No metric changes

Dependency changes

• + Added

  @grown/logger@0.0.25
  (transitive)

• + Added

  @grown/repl@0.0.30
  (transitive)

• - Removed

  @grown/logger@0.0.24
  (transitive)

• - Removed

  @grown/repl@0.0.29
  (transitive)

• Updated

  @grown/logger@^0.0.25

• Updated

  @grown/repl@^0.0.30