@napi-rs/cli - npm Package Compare versions

Comparing version 2.0.0-alpha.2 to 2.0.0-alpha.3

package.json

 {
   "name": "@napi-rs/cli",
-  "version": "2.0.0-alpha.2",
+  "version": "2.0.0-alpha.3",
   "description": "Cli tools for napi-rs",
-  "keywords": [
-    "cli",
-    "rust",
-    "napi",
-    "n-api",
-    "neon"
-  ],
+  "keywords": ["cli", "rust", "napi", "n-api", "neon"],
   "author": "LongYinan <[e-mail]>",
@@ -18,5 +12,3 @@ "homepage": "https://github.com/napi-rs/napi-rs",
   },
-  "files": [
-    "scripts"
-  ],
+  "files": ["scripts"],
   "engines": {
@@ -44,8 +36,8 @@ "node": ">= 10"
   "dependencies": {
-    "inquirer": "^8.1.5"
+    "inquirer": "^8.2.0"
   },
   "devDependencies": {
-    "@octokit/rest": "^18.11.2",
-    "@types/inquirer": "^8.1.2",
-    "@types/js-yaml": "^4.0.3",
+    "@octokit/rest": "^18.12.0",
+    "@types/inquirer": "^8.1.3",
+    "@types/js-yaml": "^4.0.4",
     "chalk": "^4.1.2",
@@ -59,3 +51,3 @@ "clipanion": "^3.1.0",
     "tslib": "^2.3.1",
-    "typanion": "^3.5.0"
+    "typanion": "^3.7.1"
   },
@@ -65,4 +57,3 @@ "funding": {
     "url": "https://github.com/sponsors/Brooooooklyn"
-  },
-  "gitHead": "3b1f53fd84aeedd60e603cefad69d7edced8d7f9"
+  }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 9 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1312449

increased by35.24%

Lines of code

31815

increased by8.61%

Number of low supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

0

decreased by-100%

Published versions last year

49

increased by6.52%

Worsened metrics

Number of package files

4

decreased by-20%

Dependency changes

• Updatedinquirer@^8.2.0