@hazeljs/core - npm Package Compare versions

Comparing version 0.7.5 to 0.7.6

package.json

 {
   "name": "@hazeljs/core",
-  "version": "0.7.5",
+  "version": "0.7.6",
   "description": "Core HazelJS framework - Dependency injection, routing, decorators, and base functionality",
@@ -23,21 +23,21 @@ "main": "dist/index.js",
     "class-transformer": "^0.5.1",
-    "class-validator": "^0.14.1",
-    "dotenv": "^16.5.0",
+    "class-validator": "^0.15.1",
+    "dotenv": "^16.6.1",
     "reflect-metadata": "^0.2.2",
-    "winston": "^3.17.0"
+    "winston": "^3.19.0"
   },
   "devDependencies": {
     "@types/jest": "^29.5.14",
-    "@types/node": "^20.17.50",
+    "@types/node": "^20.19.39",
     "@types/supertest": "^6.0.3",
-    "@typescript-eslint/eslint-plugin": "^8.18.2",
-    "@typescript-eslint/parser": "^8.18.2",
-    "eslint": "^8.56.0",
-    "eslint-config-prettier": "^9.1.0",
-    "eslint-plugin-prettier": "^5.1.3",
+    "@typescript-eslint/eslint-plugin": "^8.58.0",
+    "@typescript-eslint/parser": "^8.58.0",
+    "eslint": "^8.57.1",
+    "eslint-config-prettier": "^9.1.2",
+    "eslint-plugin-prettier": "^5.5.5",
     "jest": "^29.7.0",
-    "prettier": "^3.2.5",
-    "supertest": "^7.1.1",
-    "ts-jest": "^29.1.2",
-    "typescript": "^5.3.3"
+    "prettier": "^3.8.1",
+    "supertest": "^7.2.2",
+    "ts-jest": "^29.4.9",
+    "typescript": "^5.9.3"
   },
@@ -67,3 +67,3 @@ "publishConfig": {
   "homepage": "https://hazeljs.ai",
-  "gitHead": "18a336560f68e38e88c07aaa32d036eff2435d79"
+  "gitHead": "bc12c5f3165402a34ba4bbddc1cad58f843895f5"
 }

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 9 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 9 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No metric changes

Dependency changes

• + Added

  class-validator@0.15.1
  (transitive)

• - Removed

  class-validator@0.14.4
  (transitive)

• Updated

  class-validator@^0.15.1

• Updated

  dotenv@^16.6.1

• Updated

  winston@^3.19.0