@hap-toolkit/compiler - npm Package Compare versions

Comparing version 2.0.7 to 2.0.8-beta.1

package.json

 {
   "name": "@hap-toolkit/compiler",
-  "version": "2.0.7",
+  "version": "2.0.8-beta.1",
   "description": "compiler of hap-toolkit",
@@ -25,3 +25,3 @@ "engines": {
   "dependencies": {
-    "@hap-toolkit/shared-utils": "2.0.7",
+    "@hap-toolkit/shared-utils": "2.0.8-beta.1",
     "@jayfate/path": "^0.0.13",
@@ -32,3 +32,3 @@ "css": "^2.2.4",
   },
-  "gitHead": "af2841f239386cc909adebd463f2c067ae87a015"
+  "gitHead": "3212c62605681226a0608a2839e413834f713b6a"
 }

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

119504

0.06%

Worsened metrics

Number of low quality alerts

20

5.26%

Dependency changes

• + Added

  @hap-toolkit/shared-utils@2.0.8-beta.1
  (transitive)

• - Removed

  @hap-toolkit/shared-utils@2.0.7
  (transitive)

• Updated

  @hap-toolkit/shared-utils@2.0.8-beta.1