@moonrepo/cli
@moonrepo/cli - npm Package Compare versions
Comparing version 1.30.0-canary.202410181803 to 1.30.0-canary.202410200226
New alerts
Missing package tarball
QualityThis package is missing its tarball. It could be removed from the npm registry or there may have been an error when publishing.
Found 1 instance in 1 package
Fixed alerts
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Install scripts
Supply chain riskInstall scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
No website
QualityPackage does not have a website.
Found 1 instance in 1 package
Improved metrics
- Dependency count
- decreased by-100%
0
- Number of low maintenance alerts
- decreased by-100%
0
- Number of low quality alerts
- decreased by-100%
0
- Number of high supply chain risk alerts
- decreased by-100%
0
- Number of low supply chain risk alerts
- decreased by-100%
0
- Number of medium supply chain risk alerts
- decreased by-100%
0
Worsened metrics
- Total package byte prevSize
- decreased by-100%
0
- Number of package files
- decreased by-100%
0
- License quality
- decreased by-100%
0
- Lines of code
- decreased by-100%
0
- Number of critical quality alerts
- increased byInfinity%
1
- Number of lines in readme file
- decreased by-100%
0
Dependency changes
- Removeddetect-libc@^2.0.3
- Removed@moonrepo/core-linux-arm64-gnu@1.30.0-canary.202410181803(transitive)
- Removed@moonrepo/core-linux-arm64-musl@1.30.0-canary.202410181803(transitive)
- Removed@moonrepo/core-linux-x64-gnu@1.30.0-canary.202410181803(transitive)
- Removed@moonrepo/core-linux-x64-musl@1.30.0-canary.202410181803(transitive)
- Removed@moonrepo/core-macos-arm64@1.30.0-canary.202410181803(transitive)
- Removed@moonrepo/core-macos-x64@1.30.0-canary.202410181803(transitive)
- Removed@moonrepo/core-windows-x64-msvc@1.30.0-canary.202410181803(transitive)
- Removeddetect-libc@2.0.3(transitive)