@php-wasm/universal
Advanced tools
+9
-9
| { | ||
| "name": "@php-wasm/universal", | ||
| "version": "3.0.52", | ||
| "version": "3.0.53", | ||
| "description": "PHP.wasm – emscripten bindings for PHP", | ||
@@ -40,14 +40,14 @@ "repository": { | ||
| "license": "GPL-2.0-or-later", | ||
| "gitHead": "fd79b4d41ec8858ecacde7a814818fac95c40246", | ||
| "gitHead": "01ab4186302ca07b56ac54acd122d17b5350b3e2", | ||
| "engines": { | ||
| "node": ">=20.18.3", | ||
| "npm": ">=10.1.0" | ||
| "node": ">=20.10.0", | ||
| "npm": ">=10.2.3" | ||
| }, | ||
| "dependencies": { | ||
| "ini": "4.1.2", | ||
| "@php-wasm/node-polyfills": "3.0.52", | ||
| "@php-wasm/logger": "3.0.52", | ||
| "@php-wasm/util": "3.0.52", | ||
| "@php-wasm/stream-compression": "3.0.52", | ||
| "@php-wasm/progress": "3.0.52" | ||
| "@php-wasm/node-polyfills": "3.0.53", | ||
| "@php-wasm/logger": "3.0.53", | ||
| "@php-wasm/util": "3.0.53", | ||
| "@php-wasm/stream-compression": "3.0.53", | ||
| "@php-wasm/progress": "3.0.53" | ||
| }, | ||
@@ -54,0 +54,0 @@ "packageManager": "npm@10.9.2", |
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
+ Added
+ Added
+ Added
+ Added
+ Added
- Removed
- Removed
- Removed
- Removed
- Removed
Updated
Updated
Updated