@hap-toolkit/compiler - npm Package Compare versions

Comparing version 2.0.6 to 2.0.7-beta.1

package.json

 {
   "name": "@hap-toolkit/compiler",
-  "version": "2.0.6",
+  "version": "2.0.7-beta.1",
   "description": "compiler of hap-toolkit",
@@ -25,3 +25,3 @@ "engines": {
   "dependencies": {
-    "@hap-toolkit/shared-utils": "2.0.6",
+    "@hap-toolkit/shared-utils": "2.0.7-beta.1",
     "@jayfate/path": "^0.0.13",
@@ -32,3 +32,3 @@ "css": "^2.2.4",
   },
-  "gitHead": "bc3807e070174d60a54ea1a2b9a41c04b8f2d630"
+  "gitHead": "2d79befbaf4b87e045fa814326b2bd4819a28a12"
 }

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

119450

0.01%

Worsened metrics

Number of low quality alerts

20

5.26%

Dependency changes

• + Added

  @hap-toolkit/shared-utils@2.0.7-beta.1
  (transitive)

• - Removed

  @hap-toolkit/shared-utils@2.0.6
  (transitive)

• Updated

  @hap-toolkit/shared-utils@2.0.7-beta.1