@php-wasm/node-8-0 - npm Package Compare versions

Comparing version 3.1.8 to 3.1.9

package.json

 {
   "name": "@php-wasm/node-8-0",
-  "version": "3.1.8",
+  "version": "3.1.9",
   "description": "PHP 8.0 WebAssembly binaries for node",
@@ -38,3 +38,3 @@ "repository": {
   },
-  "gitHead": "ba6a9509c9db4e0b7af6f155cf31162a6b659b5f",
+  "gitHead": "97cf88501a336453baaac9a860a17329235a71fb",
   "dependencies": {
@@ -44,3 +44,3 @@ "ini": "4.1.2",
     "ws": "8.18.3",
-    "@php-wasm/universal": "3.1.8"
+    "@php-wasm/universal": "3.1.9"
   },
@@ -47,0 +47,0 @@ "packageManager": "npm@10.9.2",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

134

-36.79%

Number of medium supply chain risk alerts

18

-28%

Worsened metrics

Total package byte prevSize

52730586

-8.24%

Lines of code

23747

-45.84%

Dependency changes

• + Added

  @php-wasm/logger@3.1.9
  (transitive)

• + Added

  @php-wasm/node-polyfills@3.1.9
  (transitive)

• + Added

  @php-wasm/progress@3.1.9
  (transitive)

• + Added

  @php-wasm/stream-compression@3.1.9
  (transitive)

• + Added

  @php-wasm/universal@3.1.9
  (transitive)

• + Added

  @php-wasm/util@3.1.9
  (transitive)

• - Removed

  @php-wasm/logger@3.1.8
  (transitive)

• - Removed

  @php-wasm/node-polyfills@3.1.8
  (transitive)

• - Removed

  @php-wasm/progress@3.1.8
  (transitive)

• - Removed

  @php-wasm/stream-compression@3.1.8
  (transitive)

• - Removed

  @php-wasm/universal@3.1.8
  (transitive)

• - Removed

  @php-wasm/util@3.1.8
  (transitive)

• Updated

  @php-wasm/universal@3.1.9