@php-wasm/universal
Advanced tools
@php-wasm/universal - npm Package Compare versions
+7
-7
| { | ||
| "name": "@php-wasm/universal", | ||
| "version": "3.0.40", | ||
| "version": "3.0.41", | ||
| "description": "PHP.wasm – emscripten bindings for PHP", | ||
@@ -40,3 +40,3 @@ "repository": { | ||
| "license": "GPL-2.0-or-later", | ||
| "gitHead": "9f0041161949833466bbf857eacfa0ca7776e53e", | ||
| "gitHead": "638b025343c1cfee4f1b1732c0e05d286e67e136", | ||
| "engines": { | ||
@@ -48,7 +48,7 @@ "node": ">=20.18.3", | ||
| "ini": "4.1.2", | ||
| "@php-wasm/node-polyfills": "3.0.40", | ||
| "@php-wasm/logger": "3.0.40", | ||
| "@php-wasm/util": "3.0.40", | ||
| "@php-wasm/stream-compression": "3.0.40", | ||
| "@php-wasm/progress": "3.0.40" | ||
| "@php-wasm/node-polyfills": "3.0.41", | ||
| "@php-wasm/logger": "3.0.41", | ||
| "@php-wasm/util": "3.0.41", | ||
| "@php-wasm/stream-compression": "3.0.41", | ||
| "@php-wasm/progress": "3.0.41" | ||
| }, | ||
@@ -55,0 +55,0 @@ "packageManager": "npm@10.9.2", |
New alerts
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Fixed alerts
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Dependency changes
+ Added
@php-wasm/logger@3.0.41(transitive)+ Added
@php-wasm/node-polyfills@3.0.41(transitive)+ Added
@php-wasm/progress@3.0.41(transitive)+ Added
@php-wasm/stream-compression@3.0.41(transitive)+ Added
@php-wasm/util@3.0.41(transitive)- Removed
@php-wasm/logger@3.0.40(transitive)- Removed
@php-wasm/node-polyfills@3.0.40(transitive)- Removed
@php-wasm/progress@3.0.40(transitive)- Removed
@php-wasm/stream-compression@3.0.40(transitive)- Removed
@php-wasm/util@3.0.40(transitive)Updated
@php-wasm/logger@3.0.41Updated
@php-wasm/progress@3.0.41Updated
@php-wasm/util@3.0.41