@lerna/clean
Advanced tools
@lerna/clean - npm Package Compare versions
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Network access
Supply chain riskThis module accesses the network.
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 2 instances
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 19 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 3 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Trivial Package
Supply chain riskPackages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.
Improved metrics
- Total package byte prevSize
606545
3008.1%- Number of package files
233
3783.33%- Lines of code
14541
363425%Worsened metrics
- Number of low supply chain risk alerts
54
Infinity%- Number of medium supply chain risk alerts
8
700%Dependency changes
+ Added
@isaacs/cliui@8.0.2(transitive)+ Added
@jest/schemas@29.6.3(transitive)+ Added
@lerna/child-process@6.6.0(transitive)+ Added
@lerna/create@6.6.0(transitive)+ Added
@lerna/legacy-package-management@6.6.0(transitive)+ Added
@npmcli/arborist@6.2.3(transitive)+ Added
@npmcli/fs@3.1.1(transitive)+ Added
@npmcli/git@4.1.0(transitive)+ Added
@npmcli/installed-package-contents@2.1.0(transitive)+ Added
@npmcli/map-workspaces@3.0.6(transitive)+ Added
@npmcli/metavuln-calculator@5.0.1(transitive)+ Added
@npmcli/name-from-folder@2.0.0(transitive)+ Added
@npmcli/node-gyp@3.0.0(transitive)+ Added
@npmcli/package-json@3.1.1(transitive)+ Added
@npmcli/promise-spawn@6.0.2(transitive)+ Added
@npmcli/query@3.1.0(transitive)+ Added
@npmcli/run-script@6.0.2(transitive)+ Added
@pkgjs/parseargs@0.11.0(transitive)+ Added
@sigstore/bundle@1.1.0(transitive)+ Added
@sigstore/protobuf-specs@0.2.1(transitive)+ Added
@sigstore/sign@1.0.0(transitive)+ Added
@sigstore/tuf@1.0.3(transitive)+ Added
@sinclair/typebox@0.27.12(transitive)+ Added
@tufjs/canonical-json@1.0.0(transitive)+ Added
@tufjs/models@1.0.4(transitive)+ Added
abbrev@2.0.0(transitive)+ Added
ansi-regex@6.6.0(transitive)+ Added
ansi-styles@5.2.06.2.3(transitive)+ Added
are-we-there-yet@4.0.2(transitive)+ Added
bin-links@4.0.4(transitive)+ Added
cacache@17.1.4(transitive)+ Added
chardet@0.7.0(transitive)+ Added
cmd-shim@6.0.3(transitive)+ Added
crypto-random-string@2.0.0(transitive)+ Added
del@6.1.1(transitive)+ Added
eastasianwidth@0.2.0(transitive)+ Added
emoji-regex@9.2.2(transitive)+ Added
external-editor@3.1.0(transitive)+ Added
file-url@3.0.0(transitive)+ Added
find-up@5.0.0(transitive)+ Added
foreground-child@3.3.1(transitive)+ Added
fs-minipass@3.0.3(transitive)+ Added
gauge@5.0.2(transitive)+ Added
glob@10.5.0(transitive)+ Added
hosted-git-info@6.1.3(transitive)+ Added
iconv-lite@0.4.24(transitive)+ Added
ignore-walk@6.0.5(transitive)+ Added
inquirer@8.2.4(transitive)+ Added
is-path-cwd@2.2.0(transitive)+ Added
is-path-inside@3.0.3(transitive)+ Added
jackspeak@3.4.3(transitive)+ Added
json-parse-even-better-errors@3.0.2(transitive)+ Added
just-diff@6.0.2(transitive)+ Added
lerna@6.6.0(transitive)+ Added
locate-path@6.0.0(transitive)+ Added
lru-cache@10.4.3(transitive)+ Added
make-fetch-happen@11.1.1(transitive)+ Added
minimatch@6.2.39.0.9(transitive)+ Added
minipass@4.2.85.0.07.1.3(transitive)+ Added
minipass-fetch@3.0.5(transitive)+ Added
nopt@7.2.1(transitive)+ Added
normalize-package-data@5.0.0(transitive)+ Added
npm-bundled@3.0.1(transitive)+ Added
npm-install-checks@6.3.0(transitive)+ Added
npm-normalize-package-bin@3.0.1(transitive)+ Added
npm-package-arg@10.1.0(transitive)+ Added
npm-packlist@7.0.4(transitive)+ Added
npm-pick-manifest@8.0.2(transitive)+ Added
npm-registry-fetch@13.3.114.0.314.0.5(transitive)+ Added
npmlog@7.0.1(transitive)+ Added
os-tmpdir@1.0.2(transitive)+ Added
p-limit@3.1.0(transitive)+ Added
p-locate@5.0.0(transitive)+ Added
package-json-from-dist@1.0.1(transitive)+ Added
pacote@13.6.215.2.0(transitive)+ Added
parse-conflict-json@3.0.1(transitive)+ Added
path-scurry@1.11.1(transitive)+ Added
postcss-selector-parser@6.1.6(transitive)+ Added
pretty-format@29.4.3(transitive)+ Added
proc-log@3.0.0(transitive)+ Added
react-is@18.3.1(transitive)+ Added
read-cmd-shim@4.0.0(transitive)+ Added
read-package-json@6.0.4(transitive)+ Added
read-package-json-fast@3.0.2(transitive)+ Added
semver@7.3.8(transitive)+ Added
signal-exit@4.1.0(transitive)+ Added
sigstore@1.9.0(transitive)+ Added
ssri@10.0.6(transitive)+ Added
string-width@5.1.2(transitive)+ Added
strip-ansi@7.2.0(transitive)+ Added
temp-dir@2.0.0(transitive)+ Added
tempy@1.0.0(transitive)+ Added
tmp@0.0.33(transitive)+ Added
treeverse@3.0.0(transitive)+ Added
tuf-js@1.1.7(transitive)+ Added
type-fest@0.16.0(transitive)+ Added
unique-filename@3.0.0(transitive)+ Added
unique-slug@4.0.0(transitive)+ Added
unique-string@2.0.0(transitive)+ Added
validate-npm-package-name@5.0.1(transitive)+ Added
which@3.0.1(transitive)+ Added
wrap-ansi@8.1.0(transitive)+ Added
write-file-atomic@5.0.1(transitive)+ Added
yocto-queue@0.1.0(transitive)- Removed
@lerna/child-process@6.5.1(transitive)- Removed
@lerna/create@6.5.1(transitive)- Removed
@npmcli/arborist@5.3.0(transitive)- Removed
@npmcli/map-workspaces@2.0.4(transitive)- Removed
@npmcli/metavuln-calculator@3.1.1(transitive)- Removed
@npmcli/name-from-folder@1.0.1(transitive)- Removed
@npmcli/package-json@2.0.0(transitive)- Removed
asap@2.0.6(transitive)- Removed
bin-links@3.0.3(transitive)- Removed
debuglog@1.0.1(transitive)- Removed
dezalgo@1.0.4(transitive)- Removed
just-diff@5.2.0(transitive)- Removed
lerna@6.5.1(transitive)- Removed
nopt@5.0.0(transitive)- Removed
npm-registry-fetch@13.3.0(transitive)- Removed
pacote@13.6.1(transitive)- Removed
parse-conflict-json@2.0.2(transitive)- Removed
readdir-scoped-modules@1.1.0(transitive)- Removed
semver@7.3.4(transitive)- Removed
treeverse@2.0.0(transitive)Updated
lerna@6.6.0