@lerna/link
Advanced tools
@lerna/link - npm Package Compare versions
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 15 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
244522
3494.33%- Dependency count
2
-66.67%- Number of package files
6
20%- Lines of code
6231
6069.31%- Number of lines in readme file
36
2.86%Worsened metrics
- Number of low quality alerts
2
Infinity%- Number of low supply chain risk alerts
53
5200%- Number of medium supply chain risk alerts
1
Infinity%Dependency changes
- Removed
@lerna/command@6.4.1- Removed
@lerna/package-graph@6.4.1- Removed
@lerna/symlink-dependencies@6.4.1- Removed
@lerna/validation-error@6.4.1- Removed
@babel/code-frame@7.29.7(transitive)- Removed
@babel/helper-validator-identifier@7.29.7(transitive)- Removed
@lerna/child-process@6.4.1(transitive)- Removed
@lerna/command@6.4.1(transitive)- Removed
@lerna/create-symlink@6.4.1(transitive)- Removed
@lerna/package@6.4.1(transitive)- Removed
@lerna/package-graph@6.4.1(transitive)- Removed
@lerna/prerelease-id-from-version@6.4.1(transitive)- Removed
@lerna/project@6.4.1(transitive)- Removed
@lerna/resolve-symlink@6.4.1(transitive)- Removed
@lerna/symlink-binary@6.4.1(transitive)- Removed
@lerna/symlink-dependencies@6.4.1(transitive)- Removed
@lerna/validation-error@6.4.1(transitive)- Removed
@lerna/write-log-file@6.4.1(transitive)- Removed
@nodelib/fs.scandir@2.1.5(transitive)- Removed
@nodelib/fs.stat@2.0.5(transitive)- Removed
@nodelib/fs.walk@1.2.8(transitive)- Removed
@types/parse-json@4.0.2(transitive)- Removed
ansi-regex@5.0.1(transitive)- Removed
ansi-styles@4.3.0(transitive)- Removed
aproba@2.1.0(transitive)- Removed
are-we-there-yet@3.0.1(transitive)- Removed
argparse@2.0.1(transitive)- Removed
array-union@2.1.0(transitive)- Removed
at-least-node@1.0.0(transitive)- Removed
braces@3.0.3(transitive)- Removed
builtins@1.0.3(transitive)- Removed
callsites@3.1.0(transitive)- Removed
chalk@4.1.2(transitive)- Removed
chownr@2.0.0(transitive)- Removed
ci-info@2.0.0(transitive)- Removed
clone-deep@4.0.1(transitive)- Removed
cmd-shim@5.0.0(transitive)- Removed
color-convert@2.0.1(transitive)- Removed
color-name@1.1.4(transitive)- Removed
color-support@1.1.3(transitive)- Removed
console-control-strings@1.1.0(transitive)- Removed
cosmiconfig@7.1.0(transitive)- Removed
cross-spawn@7.0.6(transitive)- Removed
dedent@0.7.0(transitive)- Removed
delegates@1.0.0(transitive)- Removed
detect-indent@5.0.06.1.0(transitive)- Removed
dir-glob@3.0.1(transitive)- Removed
dot-prop@6.0.1(transitive)- Removed
duplexer@0.1.2(transitive)- Removed
emoji-regex@8.0.0(transitive)- Removed
error-ex@1.3.4(transitive)- Removed
execa@5.1.1(transitive)- Removed
fast-glob@3.3.3(transitive)- Removed
fastq@1.20.3(transitive)- Removed
fill-range@7.1.1(transitive)- Removed
fs-extra@9.1.0(transitive)- Removed
gauge@4.0.4(transitive)- Removed
get-stream@6.0.1(transitive)- Removed
glob-parent@5.1.2(transitive)- Removed
globby@11.1.0(transitive)- Removed
graceful-fs@4.2.12(transitive)- Removed
has-flag@4.0.0(transitive)- Removed
has-unicode@2.0.1(transitive)- Removed
hosted-git-info@3.0.8(transitive)- Removed
human-signals@2.1.0(transitive)- Removed
ignore@5.3.2(transitive)- Removed
import-fresh@3.3.1(transitive)- Removed
imurmurhash@0.1.4(transitive)- Removed
infer-owner@1.0.4(transitive)- Removed
inherits@2.0.4(transitive)- Removed
is-arrayish@0.2.1(transitive)- Removed
is-ci@2.0.0(transitive)- Removed
is-extglob@2.1.1(transitive)- Removed
is-fullwidth-code-point@3.0.0(transitive)- Removed
is-glob@4.0.3(transitive)- Removed
is-number@7.0.0(transitive)- Removed
is-obj@2.0.0(transitive)- Removed
is-plain-obj@1.1.02.1.0(transitive)- Removed
is-plain-object@2.0.4(transitive)- Removed
is-stream@2.0.1(transitive)- Removed
is-typedarray@1.0.0(transitive)- Removed
isexe@2.0.0(transitive)- Removed
isobject@3.0.1(transitive)- Removed
js-tokens@4.0.0(transitive)- Removed
js-yaml@4.3.2(transitive)- Removed
json-parse-even-better-errors@2.3.1(transitive)- Removed
jsonfile@6.2.1(transitive)- Removed
kind-of@6.0.3(transitive)- Removed
lines-and-columns@1.2.4(transitive)- Removed
load-json-file@6.2.0(transitive)- Removed
lru-cache@6.0.0(transitive)- Removed
make-dir@2.1.03.1.0(transitive)- Removed
merge-stream@2.0.0(transitive)- Removed
merge2@1.4.1(transitive)- Removed
micromatch@4.0.8(transitive)- Removed
mimic-fn@2.1.0(transitive)- Removed
minimist@1.2.8(transitive)- Removed
mkdirp@1.0.4(transitive)- Removed
mkdirp-infer-owner@2.0.0(transitive)- Removed
npm-package-arg@8.1.1(transitive)- Removed
npm-run-path@4.0.1(transitive)- Removed
npmlog@6.0.2(transitive)- Removed
onetime@5.1.2(transitive)- Removed
p-map-series@2.1.0(transitive)- Removed
parent-module@1.0.1(transitive)- Removed
parse-json@5.2.0(transitive)- Removed
path-key@3.1.1(transitive)- Removed
path-type@4.0.0(transitive)- Removed
picocolors@1.1.1(transitive)- Removed
picomatch@2.3.2(transitive)- Removed
pify@4.0.1(transitive)- Removed
queue-microtask@1.2.3(transitive)- Removed
read-cmd-shim@3.0.1(transitive)- Removed
readable-stream@3.6.2(transitive)- Removed
resolve-from@4.0.05.0.0(transitive)- Removed
reusify@1.1.0(transitive)- Removed
run-parallel@1.2.0(transitive)- Removed
safe-buffer@5.2.1(transitive)- Removed
semver@5.7.36.3.27.8.6(transitive)- Removed
set-blocking@2.0.0(transitive)- Removed
shallow-clone@3.0.1(transitive)- Removed
shebang-command@2.0.0(transitive)- Removed
shebang-regex@3.0.0(transitive)- Removed
signal-exit@3.0.7(transitive)- Removed
sort-keys@2.0.04.2.0(transitive)- Removed
string-width@4.2.3(transitive)- Removed
string_decoder@1.3.0(transitive)- Removed
strip-ansi@6.0.1(transitive)- Removed
strip-bom@4.0.0(transitive)- Removed
strip-final-newline@2.0.0(transitive)- Removed
strong-log-transformer@2.1.0(transitive)- Removed
supports-color@7.2.0(transitive)- Removed
through@2.3.8(transitive)- Removed
to-regex-range@5.0.1(transitive)- Removed
type-fest@0.4.10.6.0(transitive)- Removed
typedarray-to-buffer@3.1.5(transitive)- Removed
universalify@2.0.1(transitive)- Removed
util-deprecate@1.0.2(transitive)- Removed
validate-npm-package-name@3.0.0(transitive)- Removed
which@2.0.2(transitive)- Removed
wide-align@1.1.5(transitive)- Removed
write-file-atomic@2.4.33.0.34.0.2(transitive)- Removed
write-json-file@3.2.04.3.0(transitive)- Removed
write-pkg@4.0.0(transitive)- Removed
yallist@4.0.0(transitive)- Removed
yaml@1.10.3(transitive)