@lerna/create
Advanced tools
+6
-0
@@ -6,2 +6,8 @@ # Change Log | ||
| ## [9.0.4](https://github.com/lerna/lerna/compare/v9.0.3...v9.0.4) (2026-02-10) | ||
| ### Bug Fixes | ||
| - bump tar to 7.5.7, rimraf to 6.1.2, @npmcli/run-script to 10.0.3 ([#4267](https://github.com/lerna/lerna/issues/4267)) ([43e3d46](https://github.com/lerna/lerna/commit/43e3d46fd6d76f05e130e8f8f5a6299f0e93f2ae)) | ||
| ## [9.0.3](https://github.com/lerna/lerna/compare/v9.0.2...v9.0.3) (2025-11-27) | ||
@@ -8,0 +14,0 @@ |
+5
-5
| { | ||
| "name": "@lerna/create", | ||
| "version": "9.0.3", | ||
| "version": "9.0.4", | ||
| "type": "commonjs", | ||
@@ -36,3 +36,3 @@ "description": "Create a new lerna-managed package", | ||
| "@npmcli/package-json": "7.0.2", | ||
| "@npmcli/run-script": "10.0.2", | ||
| "@npmcli/run-script": "10.0.3", | ||
| "@nx/devkit": ">=21.5.2 < 23.0.0", | ||
@@ -82,3 +82,3 @@ "@octokit/plugin-enterprise-rest": "6.0.1", | ||
| "resolve-from": "5.0.0", | ||
| "rimraf": "^4.4.1", | ||
| "rimraf": "^6.1.2", | ||
| "semver": "7.7.2", | ||
@@ -90,3 +90,3 @@ "set-blocking": "^2.0.0", | ||
| "string-width": "^4.2.3", | ||
| "tar": "6.2.1", | ||
| "tar": "7.5.7", | ||
| "temp-dir": "1.0.0", | ||
@@ -127,3 +127,3 @@ "through": "2.3.8", | ||
| }, | ||
| "gitHead": "215ff0020a53ee7fe67ee954286aeefd24ea761c" | ||
| "gitHead": "5f3669c93f17caaf52c4b9916280bb5158446732" | ||
| } |
Sorry, the diff of this file is too big to display
Sorry, the diff of this file is too big to display
Network access
Supply chain riskThis module accesses the network.
Found 2 instances in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 19 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 2 instances in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 19 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
456277
0.05%+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
Updated
Updated
Updated