@openzeppelin/defender-autotask-client - npm Package Compare versions

Comparing version 1.52.0 to 1.52.1-rc.0

package.json

 {
   "name": "@openzeppelin/defender-autotask-client",
-  "version": "1.52.0",
+  "version": "1.52.1-rc.0",
   "description": "Client library for managing Defender Autotasks",
@@ -30,3 +30,3 @@ "bin": {
   "dependencies": {
-    "@openzeppelin/defender-base-client": "1.52.0",
+    "@openzeppelin/defender-base-client": "1.52.1-rc.0",
     "axios": "^1.4.0",
@@ -39,3 +39,7 @@ "dotenv": "^10.0.0",
   },
-  "gitHead": "3ed4bed14249f4d412d118d3067e6128c41bb76d"
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/OpenZeppelin/defender-client.git"
+  },
+  "gitHead": "75f2dd88ddd843a57b592a47885b3d1e653cbc94"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

7966

decreased by-88.94%

Number of package files

3

decreased by-90.32%

Lines of code

0

decreased by-100%

Number of low quality alerts

2

increased by100%

Number of medium supply chain risk alerts

2

increased byInfinity%

Dependency changes

• + Added@openzeppelin/defender-base-client@1.52.1-rc.0(transitive)

• - Removed@openzeppelin/defender-base-client@1.52.0(transitive)

• Updated@openzeppelin/defender-base-client@1.52.1-rc.0