@poi/dev-utils - npm Package Compare versions

Comparing version 11.0.0-beta.3 to 11.0.0-beta.4

package.json

 {
   "name": "@poi/dev-utils",
-  "version": "11.0.0-beta.3",
+  "version": "11.0.0-beta.4",
   "publishConfig": {
@@ -8,3 +8,4 @@ "access": "public"
   "files": [
-    "*.js"
+    "*.js",
+    "openChrome.applescript"
   ],
@@ -14,2 +15,4 @@ "license": "MIT",
     "chalk": "^2.4.1",
+    "cross-spawn": "^6.0.5",
+    "opn": "^5.4.0",
     "react-error-overlay": "^4.0.1",
@@ -20,3 +23,3 @@ "sockjs-client": "^1.1.5",
   "xo": false,
-  "gitHead": "bd170122e64542e520ca124d9370e9d363ab9d36"
+  "gitHead": "d71e9ce75c09a8ce0d1b3b15cf4cbf52ea1ef0db"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

20577

increased by42.57%

Number of package files

10

increased by66.67%

Lines of code

480

increased by34.08%

Worsened metrics

Dependency count

6

increased by50%

Number of low supply chain risk alerts

2

increased by100%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedcross-spawn@^6.0.5

• + Addedopn@^5.4.0

• + Addedcross-spawn@6.0.6(transitive)

• + Addedis-wsl@1.1.0(transitive)

• + Addedisexe@2.0.0(transitive)

• + Addednice-try@1.0.5(transitive)

• + Addedopn@5.5.0(transitive)

• + Addedpath-key@2.0.1(transitive)

• + Addedsemver@5.7.2(transitive)

• + Addedshebang-command@1.2.0(transitive)

• + Addedshebang-regex@1.0.0(transitive)

• + Addedwhich@1.3.1(transitive)