		{
		"name": "@sanity/cli",
		"version": "5.14.0-next.14+5451bfda49",
		"version": "5.14.0-next.15+e0837eb9b9",
		"description": "Sanity CLI tool for managing Sanity installations, managing plugins, schemas and datasets",
		@@ -116,7 +116,7 @@ "keywords": [
		"xdg-basedir": "^4.0.0",
		"@repo/eslint-config": "5.14.0-next.14+5451bfda49",
		"@repo/test-config": "5.14.0-next.14+5451bfda49",
		"@repo/package.config": "5.14.0-next.14+5451bfda49",
		"@repo/tsconfig": "5.14.0-next.14+5451bfda49",
		"@sanity/types": "5.13.0"
		"@repo/eslint-config": "5.14.0-next.15+e0837eb9b9",
		"@repo/package.config": "5.14.0-next.15+e0837eb9b9",
		"@repo/test-config": "5.14.0-next.15+e0837eb9b9",
		"@sanity/types": "5.13.0",
		"@repo/tsconfig": "5.14.0-next.15+e0837eb9b9"
		},
		@@ -123,0 +123,0 @@ "peerDependencies": {

New alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 9 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 9 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package