@spark-apps/quickpeek
Advanced tools
@spark-apps/quickpeek - npm Package Compare versions
New alerts
Network access
Supply chain riskThis module accesses the network.
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 2 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 2 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
892382
34.47%- Number of package files
13
18.18%- Lines of code
15051
65.78%- Number of lines in readme file
205
1.99%Worsened metrics
- Dependency count
9
28.57%- Number of low supply chain risk alerts
123
80.88%- Number of medium supply chain risk alerts
32
60%Dependency changes
+ Added
@spark-apps/video-kit@^0.1.0+ Added
@hono/node-server@2.1.1(transitive)+ Added
@modelcontextprotocol/sdk@1.30.1(transitive)+ Added
@spark-apps/video-kit@0.1.2(transitive)+ Added
accepts@2.0.0(transitive)+ Added
ajv@8.20.0(transitive)+ Added
ajv-formats@3.0.1(transitive)+ Added
body-parser@2.3.0(transitive)+ Added
bytes@3.1.2(transitive)+ Added
call-bound@1.0.4(transitive)+ Added
content-disposition@1.1.0(transitive)+ Added
content-type@1.0.52.1.0(transitive)+ Added
cookie@0.7.2(transitive)+ Added
cookie-signature@1.2.2(transitive)+ Added
cors@2.8.6(transitive)+ Added
cross-spawn@7.0.6(transitive)+ Added
depd@2.0.0(transitive)+ Added
ee-first@1.1.1(transitive)+ Added
encodeurl@2.0.0(transitive)+ Added
escape-html@1.0.3(transitive)+ Added
etag@1.8.1(transitive)+ Added
eventsource@3.0.7(transitive)+ Added
eventsource-parser@3.1.1(transitive)+ Added
express@5.2.1(transitive)+ Added
express-rate-limit@8.7.0(transitive)+ Added
fast-deep-equal@3.1.3(transitive)+ Added
fast-uri@3.1.8(transitive)+ Added
finalhandler@2.1.1(transitive)+ Added
forwarded@0.2.0(transitive)+ Added
fresh@2.0.0(transitive)+ Added
fsevents@2.3.2(transitive)+ Added
hono@4.13.9(transitive)+ Added
http-errors@2.0.1(transitive)+ Added
iconv-lite@0.7.3(transitive)+ Added
ip-address@10.7.2(transitive)+ Added
ipaddr.js@1.9.1(transitive)+ Added
is-promise@4.0.0(transitive)+ Added
isexe@2.0.0(transitive)+ Added
jose@6.2.12(transitive)+ Added
json-schema-traverse@1.0.0(transitive)+ Added
json-schema-typed@8.0.2(transitive)+ Added
media-typer@1.1.1(transitive)+ Added
merge-descriptors@2.0.0(transitive)+ Added
mime-db@1.54.0(transitive)+ Added
mime-types@3.0.2(transitive)+ Added
negotiator@1.1.0(transitive)+ Added
object-assign@4.1.1(transitive)+ Added
object-inspect@1.13.4(transitive)+ Added
on-finished@2.4.1(transitive)+ Added
once@1.4.0(transitive)+ Added
parseurl@1.3.3(transitive)+ Added
path-key@3.1.1(transitive)+ Added
path-to-regexp@8.4.2(transitive)+ Added
pkce-challenge@5.0.1(transitive)+ Added
playwright@1.62.1(transitive)+ Added
playwright-core@1.62.1(transitive)+ Added
proxy-addr@2.0.8(transitive)+ Added
qs@6.16.0(transitive)+ Added
range-parser@1.3.0(transitive)+ Added
raw-body@3.0.2(transitive)+ Added
require-from-string@2.0.2(transitive)+ Added
router@2.2.0(transitive)+ Added
safer-buffer@2.1.2(transitive)+ Added
send@1.2.1(transitive)+ Added
serve-static@2.2.1(transitive)+ Added
setprototypeof@1.2.0(transitive)+ Added
shebang-command@2.0.0(transitive)+ Added
shebang-regex@3.0.0(transitive)+ Added
side-channel@1.1.1(transitive)+ Added
side-channel-list@1.0.1(transitive)+ Added
side-channel-map@1.0.1(transitive)+ Added
side-channel-weakmap@1.0.2(transitive)+ Added
statuses@2.0.2(transitive)+ Added
toidentifier@1.0.1(transitive)+ Added
type-is@2.1.0(transitive)+ Added
unpipe@1.0.0(transitive)+ Added
vary@1.1.2(transitive)+ Added
which@2.0.2(transitive)+ Added
wrappy@1.0.2(transitive)+ Added
zod@4.6.5(transitive)+ Added
zod-to-json-schema@3.25.2(transitive)- Removed
playwright@1.63.0(transitive)- Removed
playwright-core@1.63.0(transitive)Updated
playwright@1.62.1