@stacks/transactions - npm Package Compare versions

Comparing version 7.1.3-pr.4 to 7.1.3-pr.6

package.json

 {
   "name": "@stacks/transactions",
-  "version": "7.1.3-pr.4+9d467b14",
+  "version": "7.1.3-pr.6+9ccc459d",
   "description": "Javascript library for constructing transactions on the Stacks blockchain.",
@@ -30,4 +30,4 @@ "license": "MIT",
     "@noble/secp256k1": "1.7.1",
-    "@stacks/common": "^7.1.3-pr.4+9d467b14",
-    "@stacks/network": "^7.1.3-pr.4+9d467b14",
+    "@stacks/common": "^7.1.3-pr.6+9ccc459d",
+    "@stacks/network": "^7.1.3-pr.6+9ccc459d",
     "c32check": "^2.0.0",
@@ -37,3 +37,3 @@ "lodash.clonedeep": "^4.5.0"
   "devDependencies": {
-    "@stacks/encryption": "^7.1.3-pr.4+9d467b14",
+    "@stacks/encryption": "^7.1.3-pr.6+9ccc459d",
     "@types/common-tags": "^1.8.0",
@@ -67,3 +67,3 @@ "@types/elliptic": "^6.4.12",
   },
-  "gitHead": "9d467b141798618c284d5be76ca3a1d3d8dfa40a"
+  "gitHead": "9ccc459d7201a49da03a8e3cd7ba59ada9dc5f50"
 }

New alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No metric changes

Dependency changes

• Updated

  @stacks/common@^7.1.3-pr.6+9ccc459d

• Updated

  @stacks/network@^7.1.3-pr.6+9ccc459d