@salla.sa/cli - npm Package Compare versions

Comparing version 1.2.5 to 1.2.6

package.json

 {
   "name": "@salla.sa/cli",
-  "version": "1.2.5",
+  "version": "1.2.6",
   "description": "The Official Salla Command Line Interface",
@@ -32,6 +32,7 @@ "author": "Salla App (https://github.com/SallaApp)",
     "test": "mocha ./test/cli/all-tests.js --exit  --timeout -1",
-    "postinstall": "node scripts/postinstall.js"
+    "//postinstall": "node scripts/postinstall.js"
   },
   "files": [
-    "dist/"
+    "dist/",
+    "scripts/postinstall.js"
   ],
@@ -38,0 +39,0 @@ "dependencies": {

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

11712

increased by7.67%

Number of package files

3

increased by50%

Lines of code

25

increased byInfinity%

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of low supply chain risk alerts

1

increased byInfinity%

No dependency changes