@shipengine/js-api
Advanced tools
@@ -84,4 +84,6 @@ import { Address } from "../addresses"; | ||
| requiresFundedAmount: boolean; | ||
| sendRates: boolean; | ||
| services: CarrierService[]; | ||
| supportsLabelMessages: boolean; | ||
| supportsUserManagedRates: boolean; | ||
| } | ||
@@ -88,0 +90,0 @@ /** |
+1
-1
| { | ||
| "name": "@shipengine/js-api", | ||
| "version": "4.24.1-next.0", | ||
| "version": "4.24.1-next.1", | ||
| "main": "./index.js", | ||
@@ -5,0 +5,0 @@ "types": "./index.d.ts", |
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
1614599
045751
0