@platformatic/foundation - npm Package Compare versions

Comparing version 3.11.0 to 3.12.0

lib/schema.js

@@ -681,2 +681,27 @@ export function overridableValue (spec, defaultValue) {
 
+export const policies = {
+  type: 'object',
+  properties: {
+    deny: {
+      type: 'object',
+      patternProperties: {
+        '^.*$': {
+          oneOf: [
+            { type: 'string' },
+            {
+              type: 'array',
+              items: {
+                type: 'string'
+              },
+              minItems: 1
+            }
+          ]
+        }
+      }
+    }
+  },
+  required: ['deny'],
+  additionalProperties: false
+}
+
 export const applications = {
@@ -1227,3 +1252,4 @@ type: 'array',
     }
-  }
+  },
+  policies
 }
@@ -1253,2 +1279,3 @@
   telemetry,
+  policies,
   applications,
@@ -1255,0 +1282,0 @@ runtimeProperties,

package.json

 {
   "name": "@platformatic/foundation",
-  "version": "3.11.0",
+  "version": "3.12.0",
   "description": "Platformatic Foundation",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

99288

0.47%

Lines of code

2905

0.9%

No dependency changes