@nocobase/plugin-users
Advanced tools
@nocobase/plugin-users - npm Package Compare versions
@@ -16,15 +16,15 @@ /** | ||
| "react": "18.2.0", | ||
| "@nocobase/client": "2.0.54", | ||
| "@nocobase/client": "2.0.55", | ||
| "antd": "5.24.2", | ||
| "@formily/core": "2.3.7", | ||
| "@nocobase/plugin-acl": "2.0.54", | ||
| "@nocobase/plugin-acl": "2.0.55", | ||
| "@emotion/css": "11.13.0", | ||
| "@nocobase/utils": "2.0.54", | ||
| "@nocobase/database": "2.0.54", | ||
| "@nocobase/server": "2.0.54", | ||
| "@nocobase/plugin-user-data-sync": "2.0.54", | ||
| "@nocobase/plugin-ui-schema-storage": "2.0.54", | ||
| "@nocobase/utils": "2.0.55", | ||
| "@nocobase/database": "2.0.55", | ||
| "@nocobase/server": "2.0.55", | ||
| "@nocobase/plugin-user-data-sync": "2.0.55", | ||
| "@nocobase/plugin-ui-schema-storage": "2.0.55", | ||
| "lodash": "4.18.1", | ||
| "@nocobase/actions": "2.0.54", | ||
| "@nocobase/actions": "2.0.55", | ||
| "sequelize": "6.35.2" | ||
| }; |
+2
-2
@@ -9,3 +9,3 @@ { | ||
| "description.zh-CN": "提供了基础的用户模型，以及创建人和最后更新人字段。", | ||
| "version": "2.0.54", | ||
| "version": "2.0.55", | ||
| "license": "Apache-2.0", | ||
@@ -34,3 +34,3 @@ "main": "./dist/server/index.js", | ||
| }, | ||
| "gitHead": "07c5c9c6c5fe587da82b8791cc2fd8c365959935", | ||
| "gitHead": "f8e14bcb84ed1ab8f2915441ef2208218c272ede", | ||
| "keywords": [ | ||
@@ -37,0 +37,0 @@ "Users & permissions" |
New alerts
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Fixed alerts
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package