@mrlegendbot/baileys
Advanced tools
@mrlegendbot/baileys - npm Package Compare versions
New alerts
Known malware
Supply chain riskThis package version is identified as malware. It has been flagged either by Socket's AI scanner and confirmed by our threat research team, or is listed as malicious in security databases and other sources.
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 2 instances
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
No repository
Supply chain riskPackage does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.
No website
QualityPackage does not have a website.
Fixed alerts
Known malware
Supply chain riskThis package version is identified as malware. It has been flagged either by Socket's AI scanner and confirmed by our threat research team, or is listed as malicious in security databases and other sources.
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 2 instances
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
Improved metrics
- Total package byte prevSize
7099963
347.5%- Dependency count
15
-25%- Number of package files
206
83.93%- Lines of code
61146
57.26%- Number of low supply chain risk alerts
10
-9.09%Worsened metrics
- Dev dependency count
31
Infinity%- Number of low maintenance alerts
1
Infinity%- Number of medium supply chain risk alerts
8
14.29%Dependency changes
+ Added
@mrlegendbot/libsignal-node@1.1.0(transitive)- Removed
axios@^1.7.9- Removed
cache-manager@^7.2.4- Removed
futoin-hkdf@^1.5.3- Removed
long@^5.2.3- Removed
uuid@^11.0.5- Removed
agent-base@6.0.2(transitive)- Removed
async-function@1.0.0(transitive)- Removed
async-generator-function@1.0.0(transitive)- Removed
asynckit@0.4.0(transitive)- Removed
axios@1.21.0(transitive)- Removed
cache-manager@7.2.9(transitive)- Removed
call-bind-apply-helpers@1.0.2(transitive)- Removed
combined-stream@1.0.8(transitive)- Removed
delayed-stream@1.0.0(transitive)- Removed
dunder-proto@1.0.1(transitive)- Removed
es-define-property@1.0.1(transitive)- Removed
es-errors@1.3.0(transitive)- Removed
es-object-atoms@1.1.2(transitive)- Removed
es-set-tostringtag@2.1.0(transitive)- Removed
follow-redirects@1.16.2(transitive)- Removed
form-data@4.0.6(transitive)- Removed
function-bind@1.1.2(transitive)- Removed
futoin-hkdf@1.5.3(transitive)- Removed
generator-function@2.0.1(transitive)- Removed
get-intrinsic@1.3.1(transitive)- Removed
get-proto@1.0.1(transitive)- Removed
gopd@1.2.0(transitive)- Removed
has-symbols@1.1.0(transitive)- Removed
has-tostringtag@1.0.2(transitive)- Removed
hasown@2.0.4(transitive)- Removed
https-proxy-agent@5.0.1(transitive)- Removed
libsignal@6.0.0(transitive)- Removed
math-intrinsics@1.1.0(transitive)- Removed
mime-db@1.52.0(transitive)- Removed
mime-types@2.1.35(transitive)- Removed
proxy-from-env@2.1.0(transitive)- Removed
uuid@11.1.1(transitive)