@react-native-community/cli-tools
Advanced tools
@react-native-community/cli-tools - npm Package Compare versions
+3
-3
| { | ||
| "name": "@react-native-community/cli-tools", | ||
| "version": "17.0.0", | ||
| "version": "18.0.0", | ||
| "license": "MIT", | ||
@@ -22,3 +22,3 @@ "main": "build/index.js", | ||
| "devDependencies": { | ||
| "@react-native-community/cli-types": "17.0.0", | ||
| "@react-native-community/cli-types": "18.0.0", | ||
| "@types/mime": "^2.0.1", | ||
@@ -40,3 +40,3 @@ "@types/node": "^18.0.0", | ||
| }, | ||
| "gitHead": "a94e2df7882166b375fbfe2b4ff04a94e2af62d9" | ||
| "gitHead": "f50c1f19a8068787d074560375b726d89c30a088" | ||
| } |
New alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Fixed alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Improved metrics
- Number of medium supply chain risk alerts
12
-40%