@swiftmr/app-builder-lib - npm Package Compare versions

Comparing version 1.0.8 to 1.0.9

package.json

 {
   "name": "@swiftmr/app-builder-lib",
   "description": "electron-builder lib",
-  "version": "1.0.8",
+  "version": "1.0.9",
   "app-builder-lib-public-version": "22.14.5",
@@ -57,4 +57,4 @@ "main": "out/index.js",
     "bluebird-lst": "^1.0.9",
-    "builder-util": "22.14.5",
-    "builder-util-runtime": "8.9.1",
+    "builder-util": "workspace:*",
+    "builder-util-runtime": "workspace:*",
     "chromium-pickle-js": "^0.2.0",
@@ -64,3 +64,3 @@ "debug": "^4.3.2",
     "electron-osx-sign": "^0.5.0",
-    "electron-publish": "22.14.5",
+    "electron-publish": "workspace:*",
     "form-data": "^4.0.0",
@@ -107,7 +107,7 @@ "fs-extra": "^10.0.0",
     "@types/semver": "7.3.8",
-    "dmg-builder": "22.14.5",
-    "electron-builder-squirrel-windows": "22.14.5"
+    "dmg-builder": "workspace:*",
+    "electron-builder-squirrel-windows": "workspace:*"
   },
   "//": "electron-builder-squirrel-windows and dmg-builder added as dev dep for tests (as otherwise `require` doesn't work using Yarn 2)",
   "typings": "./out/index.d.ts"
-}
+}

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 15 instances in 1 package

Improved metrics

Number of low supply chain risk alerts

130

decreased by-13.33%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

2692005

decreased by-5.26%

Number of package files

284

decreased by-22.19%

Lines of code

20120

decreased by-8.51%

Dependency changes

• - Removed@types/debug@4.1.12(transitive)

• - Removed@types/fs-extra@9.0.13(transitive)

• - Removed@types/ms@0.7.34(transitive)

• - Removedapp-builder-bin@3.7.1(transitive)

• - Removedbuffer-from@1.1.2(transitive)

• - Removedbuilder-util@22.14.5(transitive)

• - Removedbuilder-util-runtime@8.9.1(transitive)

• - Removedelectron-publish@22.14.5(transitive)

• - Removedmime@2.6.0(transitive)

• - Removedsax@1.4.1(transitive)

• - Removedsource-map@0.6.1(transitive)

• - Removedsource-map-support@0.5.21(transitive)

• - Removedstat-mode@1.0.0(transitive)

• Updatedbuilder-util@workspace:*

• Updatedbuilder-util-runtime@workspace:*

• Updatedelectron-publish@workspace:*