@prisma/config
Advanced tools
@prisma/config - npm Package Compare versions
+3
-3
| { | ||
| "name": "@prisma/config", | ||
| "version": "6.5.0-dev.39", | ||
| "version": "6.5.0-dev.40", | ||
| "description": "Internal package used to define and read Prisma configuration files", | ||
@@ -25,4 +25,4 @@ "main": "dist/index.js", | ||
| "jest-junit": "16.0.0", | ||
| "@prisma/driver-adapter-utils": "6.5.0-dev.39", | ||
| "@prisma/get-platform": "6.5.0-dev.39" | ||
| "@prisma/driver-adapter-utils": "6.5.0-dev.40", | ||
| "@prisma/get-platform": "6.5.0-dev.40" | ||
| }, | ||
@@ -29,0 +29,0 @@ "files": [ |
New alerts
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Fixed alerts
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package