@shipengine/js-api - npm Package Compare versions

Comparing version 4.18.5 to 4.18.6-next.0

account-addons/api.d.ts

 import { AxiosInstance } from "axios";
-import { Addon, AddonTypes } from "./types";
+import { Addon, AddonCodes } from "./types";
 /**
@@ -20,3 +20,7 @@ * # Account Addons API module - /v1/account/addons
      */
-    enable: (addonCode: AddonTypes) => Promise<import("axios").AxiosResponse<void, any>>;
+    enable: (addonCode: AddonCodes) => Promise<import("axios").AxiosResponse<void, any>>;
+    /**
+     * The `disable` method allows to disable an AddOn for the current user
+     */
+    disable: (addonCode: AddonCodes) => Promise<import("axios").AxiosResponse<void, any>>;
 }

account-addons/types.d.ts

@@ -1,5 +0,5 @@
-export type AddonTypes = "ss_api_analytics";
+export type AddonCodes = "ss_api_analytics";
 export type Addon = {
     /** Addon code, unique reference for it */
-    code: AddonTypes;
+    code: AddonCodes;
     /** Date when the deactivation will take place, will be undefined while the user does not wish to deactivate it */
@@ -6,0 +6,0 @@ deactivationDate?: string;

package.json

 {
   "name": "@shipengine/js-api",
-  "version": "4.18.5",
+  "version": "4.18.6-next.0",
   "main": "./index.js",
@@ -5,0 +5,0 @@ "types": "./index.d.ts",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1603885

0.04%

Lines of code

45471

0.04%

Worsened metrics

Number of low quality alerts

2

100%

No dependency changes