@php-wasm/universal
Advanced tools
+7
-7
| { | ||
| "name": "@php-wasm/universal", | ||
| "version": "3.0.53", | ||
| "version": "3.0.54", | ||
| "description": "PHP.wasm – emscripten bindings for PHP", | ||
@@ -40,3 +40,3 @@ "repository": { | ||
| "license": "GPL-2.0-or-later", | ||
| "gitHead": "01ab4186302ca07b56ac54acd122d17b5350b3e2", | ||
| "gitHead": "e449793042bf2c66f8fdd4212ef266801ae3f605", | ||
| "engines": { | ||
@@ -48,7 +48,7 @@ "node": ">=20.10.0", | ||
| "ini": "4.1.2", | ||
| "@php-wasm/node-polyfills": "3.0.53", | ||
| "@php-wasm/logger": "3.0.53", | ||
| "@php-wasm/util": "3.0.53", | ||
| "@php-wasm/stream-compression": "3.0.53", | ||
| "@php-wasm/progress": "3.0.53" | ||
| "@php-wasm/node-polyfills": "3.0.54", | ||
| "@php-wasm/logger": "3.0.54", | ||
| "@php-wasm/util": "3.0.54", | ||
| "@php-wasm/stream-compression": "3.0.54", | ||
| "@php-wasm/progress": "3.0.54" | ||
| }, | ||
@@ -55,0 +55,0 @@ "packageManager": "npm@10.9.2", |
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
+ Added
+ Added
+ Added
+ Added
+ Added
- Removed
- Removed
- Removed
- Removed
- Removed
Updated
Updated
Updated