@npmcli/arborist - npm Package Compare versions

Comparing version 8.0.4 to 8.0.5

lib/arborist/rebuild.js

@@ -11,2 +11,3 @@ // Arborist.rebuild({path = this.path}) will do all the binlinks and
 const { callLimit: promiseCallLimit } = require('promise-call-limit')
+const promiseRetry = require('promise-retry')
 const { resolve } = require('node:path')
@@ -388,3 +389,2 @@ const { isNodeGypPackage, defaultGypInstallScript } = require('@npmcli/node-gyp')
     // On Windows, antivirus/indexer can transiently lock files, causing EPERM/EACCES/EBUSY on the rename inside write-file-atomic (used by bin-links/fix-bin.js), so, retry with backoff.
-    const promiseRetry = require('promise-retry')
     const p = promiseRetry((retry) => binLinks({
@@ -391,0 +391,0 @@ pkg: node.package,

package.json

 {
   "name": "@npmcli/arborist",
-  "version": "8.0.4",
+  "version": "8.0.5",
   "description": "Manage node_modules trees",
@@ -5,0 +5,0 @@ "dependencies": {

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 6 instances in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 6 instances in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

477334

0

No dependency changes