@kmamal/build-sdl - npm Package Compare versions

Comparing version 2.24.1-4 to 2.24.1-5

package.json

 {
-  "version": "2.24.1-4",
+  "version": "2.24.1-5",
   "name": "@kmamal/build-sdl",
@@ -11,15 +11,18 @@ "description": "build-sdl",
   "scripts": {
-    "install": "cd scripts && npx -y zx install.mjs",
-    "download-release": "cd scripts && npx -y zx download-release.mjs",
-    "build": "cd scripts && npx -y zx build.mjs",
-    "download-src": "cd scripts && npx -y zx download-src.mjs",
-    "configure": "cd scripts && npx -y zx configure.mjs",
-    "make": "cd scripts && npx -y zx make.mjs",
-    "upload-release": "cd scripts && npx -y zx upload-release.mjs",
-    "release": "cd scripts && npx -y zx release.mjs",
-    "clean": "cd scripts && npx -y zx clean.mjs",
+    "install": "cd scripts && node install.mjs",
+    "download-release": "cd scripts && node download-release.mjs",
+    "build": "cd scripts && node build.mjs",
+    "download-src": "cd scripts && node download-src.mjs",
+    "configure": "cd scripts && node configure.mjs",
+    "make": "cd scripts && node make.mjs",
+    "upload-release": "cd scripts && node upload-release.mjs",
+    "release": "cd scripts && node release.mjs",
+    "clean": "cd scripts && node clean.mjs",
     "install-deps-ubuntu": "./scripts/install-deps-ubuntu.sh",
     "install-deps-mac": "./scripts/install-deps-mac.sh"
   },
-  "license": "MIT"
+  "license": "MIT",
+  "dependencies": {
+    "tar": "^6.1.11"
+  }
 }

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

13065

increased by18.85%

Number of package files

17

increased by6.25%

Lines of code

360

increased by21.21%

Worsened metrics

Dependency count

1

increased byInfinity%

Number of low supply chain risk alerts

10

increased by42.86%

Number of medium supply chain risk alerts

8

increased by14.29%

Dependency changes

• + Addedtar@^6.1.11

• + Addedchownr@2.0.0(transitive)

• + Addedfs-minipass@2.1.0(transitive)

• + Addedminipass@3.3.65.0.0(transitive)

• + Addedminizlib@2.1.2(transitive)

• + Addedmkdirp@1.0.4(transitive)

• + Addedtar@6.2.1(transitive)

• + Addedyallist@4.0.0(transitive)