@ronomon/pure - npm Package Compare versions

Comparing version 1.0.0 to 1.0.2

package.json

 {
   "name": "@ronomon/pure",
-  "version": "1.0.0",
-  "description": "Checks ZIP files for dangerous compression ratios, spec deviations, malicious archive signatures, mismatching local and central directory headers, ambiguous UTF-8 filenames, directory and symlink traversals, invalid MS-DOS dates, overlapping headers, overflow, underflow, sparseness, accidental buffer bleeds etc.",
+  "version": "1.0.2",
+  "description": "Checks zip files for zip bombs, dangerous compression ratios, spec deviations, malicious archive signatures, mismatching local and central directory headers, ambiguous UTF-8 filenames, directory and symlink traversals, invalid MS-DOS dates, overlapping headers, overflow, underflow, sparseness, accidental buffer bleeds etc.",
   "main": "binding.node",
@@ -6,0 +6,0 @@ "files": [

New alerts

AI-detected potential security risk

Supply chain risk

AI has determined that this package may contain potential security issues or vulnerabilities.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2152347

Worsened metrics

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes