@php-wasm/universal
Advanced tools
@php-wasm/universal - npm Package Compare versions
+7
-7
| { | ||
| "name": "@php-wasm/universal", | ||
| "version": "3.1.18", | ||
| "version": "3.1.19", | ||
| "description": "PHP.wasm – emscripten bindings for PHP", | ||
@@ -40,3 +40,3 @@ "repository": { | ||
| "license": "GPL-2.0-or-later", | ||
| "gitHead": "556d5464c00b85ced0a505a31968b3fa1753eb28", | ||
| "gitHead": "be542ee28a5966eeb28154cd8e3723db5ff9df07", | ||
| "engines": { | ||
@@ -48,7 +48,7 @@ "node": ">=20.10.0", | ||
| "ini": "4.1.2", | ||
| "@php-wasm/node-polyfills": "3.1.18", | ||
| "@php-wasm/logger": "3.1.18", | ||
| "@php-wasm/util": "3.1.18", | ||
| "@php-wasm/stream-compression": "3.1.18", | ||
| "@php-wasm/progress": "3.1.18" | ||
| "@php-wasm/node-polyfills": "3.1.19", | ||
| "@php-wasm/logger": "3.1.19", | ||
| "@php-wasm/util": "3.1.19", | ||
| "@php-wasm/stream-compression": "3.1.19", | ||
| "@php-wasm/progress": "3.1.19" | ||
| }, | ||
@@ -55,0 +55,0 @@ "packageManager": "npm@10.9.2", |
New alerts
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Fixed alerts
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Dependency changes
+ Added
@php-wasm/logger@3.1.19(transitive)+ Added
@php-wasm/node-polyfills@3.1.19(transitive)+ Added
@php-wasm/progress@3.1.19(transitive)+ Added
@php-wasm/stream-compression@3.1.19(transitive)+ Added
@php-wasm/util@3.1.19(transitive)- Removed
@php-wasm/logger@3.1.18(transitive)- Removed
@php-wasm/node-polyfills@3.1.18(transitive)- Removed
@php-wasm/progress@3.1.18(transitive)- Removed
@php-wasm/stream-compression@3.1.18(transitive)- Removed
@php-wasm/util@3.1.18(transitive)Updated
@php-wasm/logger@3.1.19Updated
@php-wasm/progress@3.1.19Updated
@php-wasm/util@3.1.19