@tauri-apps/cli - npm Package Compare versions

Comparing version 2.10.0 to 2.10.1

index.js

@@ -10,5 +10,2 @@ // Copyright 2019-2024 Tauri Programme within The Commons Conservancy
 
-const { createRequire } = require('node:module')
-require = createRequire(__filename)
-
 const { readFileSync } = require('node:fs')
@@ -74,3 +71,3 @@ let nativeBinding = null
     try {
-      nativeBinding = require(process.env.NAPI_RS_NATIVE_LIBRARY_PATH);
+      return require(process.env.NAPI_RS_NATIVE_LIBRARY_PATH);
     } catch (err) {
@@ -87,3 +84,8 @@ loadErrors.push(err)
       try {
-        return require('@tauri-apps/cli-android-arm64')
+        const binding = require('@tauri-apps/cli-android-arm64')
+        const bindingPackageVersion = require('@tauri-apps/cli-android-arm64/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -99,3 +101,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-android-arm-eabi')
+        const binding = require('@tauri-apps/cli-android-arm-eabi')
+        const bindingPackageVersion = require('@tauri-apps/cli-android-arm-eabi/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -109,3 +116,20 @@ loadErrors.push(e)
     if (process.arch === 'x64') {
+      if (process.config?.variables?.shlib_suffix === 'dll.a' || process.config?.variables?.node_target_type === 'shared_library') {
+        try {
+        return require('./cli.win32-x64-gnu.node')
+      } catch (e) {
+        loadErrors.push(e)
+      }
       try {
+        const binding = require('@tauri-apps/cli-win32-x64-gnu')
+        const bindingPackageVersion = require('@tauri-apps/cli-win32-x64-gnu/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
+      } catch (e) {
+        loadErrors.push(e)
+      }
+      } else {
+        try {
         return require('./cli.win32-x64-msvc.node')
@@ -116,6 +140,12 @@ } catch (e) {
       try {
-        return require('@tauri-apps/cli-win32-x64-msvc')
+        const binding = require('@tauri-apps/cli-win32-x64-msvc')
+        const bindingPackageVersion = require('@tauri-apps/cli-win32-x64-msvc/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
         loadErrors.push(e)
       }
+      }
     } else if (process.arch === 'ia32') {
@@ -128,3 +158,8 @@ try {
       try {
-        return require('@tauri-apps/cli-win32-ia32-msvc')
+        const binding = require('@tauri-apps/cli-win32-ia32-msvc')
+        const bindingPackageVersion = require('@tauri-apps/cli-win32-ia32-msvc/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -140,3 +175,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-win32-arm64-msvc')
+        const binding = require('@tauri-apps/cli-win32-arm64-msvc')
+        const bindingPackageVersion = require('@tauri-apps/cli-win32-arm64-msvc/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -155,3 +195,8 @@ loadErrors.push(e)
     try {
-      return require('@tauri-apps/cli-darwin-universal')
+      const binding = require('@tauri-apps/cli-darwin-universal')
+      const bindingPackageVersion = require('@tauri-apps/cli-darwin-universal/package.json').version
+      if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+        throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+      }
+      return binding
     } catch (e) {
@@ -167,3 +212,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-darwin-x64')
+        const binding = require('@tauri-apps/cli-darwin-x64')
+        const bindingPackageVersion = require('@tauri-apps/cli-darwin-x64/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -179,3 +229,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-darwin-arm64')
+        const binding = require('@tauri-apps/cli-darwin-arm64')
+        const bindingPackageVersion = require('@tauri-apps/cli-darwin-arm64/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -195,3 +250,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-freebsd-x64')
+        const binding = require('@tauri-apps/cli-freebsd-x64')
+        const bindingPackageVersion = require('@tauri-apps/cli-freebsd-x64/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -207,3 +267,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-freebsd-arm64')
+        const binding = require('@tauri-apps/cli-freebsd-arm64')
+        const bindingPackageVersion = require('@tauri-apps/cli-freebsd-arm64/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -224,3 +289,8 @@ loadErrors.push(e)
         try {
-          return require('@tauri-apps/cli-linux-x64-musl')
+          const binding = require('@tauri-apps/cli-linux-x64-musl')
+          const bindingPackageVersion = require('@tauri-apps/cli-linux-x64-musl/package.json').version
+          if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
         } catch (e) {
@@ -236,3 +306,8 @@ loadErrors.push(e)
         try {
-          return require('@tauri-apps/cli-linux-x64-gnu')
+          const binding = require('@tauri-apps/cli-linux-x64-gnu')
+          const bindingPackageVersion = require('@tauri-apps/cli-linux-x64-gnu/package.json').version
+          if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
         } catch (e) {
@@ -250,3 +325,8 @@ loadErrors.push(e)
         try {
-          return require('@tauri-apps/cli-linux-arm64-musl')
+          const binding = require('@tauri-apps/cli-linux-arm64-musl')
+          const bindingPackageVersion = require('@tauri-apps/cli-linux-arm64-musl/package.json').version
+          if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
         } catch (e) {
@@ -262,3 +342,8 @@ loadErrors.push(e)
         try {
-          return require('@tauri-apps/cli-linux-arm64-gnu')
+          const binding = require('@tauri-apps/cli-linux-arm64-gnu')
+          const bindingPackageVersion = require('@tauri-apps/cli-linux-arm64-gnu/package.json').version
+          if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
         } catch (e) {
@@ -276,3 +361,8 @@ loadErrors.push(e)
         try {
-          return require('@tauri-apps/cli-linux-arm-musleabihf')
+          const binding = require('@tauri-apps/cli-linux-arm-musleabihf')
+          const bindingPackageVersion = require('@tauri-apps/cli-linux-arm-musleabihf/package.json').version
+          if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
         } catch (e) {
@@ -288,3 +378,8 @@ loadErrors.push(e)
         try {
-          return require('@tauri-apps/cli-linux-arm-gnueabihf')
+          const binding = require('@tauri-apps/cli-linux-arm-gnueabihf')
+          const bindingPackageVersion = require('@tauri-apps/cli-linux-arm-gnueabihf/package.json').version
+          if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
         } catch (e) {
@@ -294,2 +389,36 @@ loadErrors.push(e)
       }
+    } else if (process.arch === 'loong64') {
+      if (isMusl()) {
+        try {
+          return require('./cli.linux-loong64-musl.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@tauri-apps/cli-linux-loong64-musl')
+          const bindingPackageVersion = require('@tauri-apps/cli-linux-loong64-musl/package.json').version
+          if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      } else {
+        try {
+          return require('./cli.linux-loong64-gnu.node')
+        } catch (e) {
+          loadErrors.push(e)
+        }
+        try {
+          const binding = require('@tauri-apps/cli-linux-loong64-gnu')
+          const bindingPackageVersion = require('@tauri-apps/cli-linux-loong64-gnu/package.json').version
+          if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
+        } catch (e) {
+          loadErrors.push(e)
+        }
+      }
     } else if (process.arch === 'riscv64') {
@@ -303,3 +432,8 @@ if (isMusl()) {
         try {
-          return require('@tauri-apps/cli-linux-riscv64-musl')
+          const binding = require('@tauri-apps/cli-linux-riscv64-musl')
+          const bindingPackageVersion = require('@tauri-apps/cli-linux-riscv64-musl/package.json').version
+          if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
         } catch (e) {
@@ -315,3 +449,8 @@ loadErrors.push(e)
         try {
-          return require('@tauri-apps/cli-linux-riscv64-gnu')
+          const binding = require('@tauri-apps/cli-linux-riscv64-gnu')
+          const bindingPackageVersion = require('@tauri-apps/cli-linux-riscv64-gnu/package.json').version
+          if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+            throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+          }
+          return binding
         } catch (e) {
@@ -328,3 +467,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-linux-ppc64-gnu')
+        const binding = require('@tauri-apps/cli-linux-ppc64-gnu')
+        const bindingPackageVersion = require('@tauri-apps/cli-linux-ppc64-gnu/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -340,3 +484,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-linux-s390x-gnu')
+        const binding = require('@tauri-apps/cli-linux-s390x-gnu')
+        const bindingPackageVersion = require('@tauri-apps/cli-linux-s390x-gnu/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -351,3 +500,3 @@ loadErrors.push(e)
       try {
-        return require('./cli.linux-arm64-ohos.node')
+        return require('./cli.openharmony-arm64.node')
       } catch (e) {
@@ -357,3 +506,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-linux-arm64-ohos')
+        const binding = require('@tauri-apps/cli-openharmony-arm64')
+        const bindingPackageVersion = require('@tauri-apps/cli-openharmony-arm64/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -364,3 +518,3 @@ loadErrors.push(e)
       try {
-        return require('./cli.linux-x64-ohos.node')
+        return require('./cli.openharmony-x64.node')
       } catch (e) {
@@ -370,3 +524,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-linux-x64-ohos')
+        const binding = require('@tauri-apps/cli-openharmony-x64')
+        const bindingPackageVersion = require('@tauri-apps/cli-openharmony-x64/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -377,3 +536,3 @@ loadErrors.push(e)
       try {
-        return require('./cli.linux-arm-ohos.node')
+        return require('./cli.openharmony-arm.node')
       } catch (e) {
@@ -383,3 +542,8 @@ loadErrors.push(e)
       try {
-        return require('@tauri-apps/cli-linux-arm-ohos')
+        const binding = require('@tauri-apps/cli-openharmony-arm')
+        const bindingPackageVersion = require('@tauri-apps/cli-openharmony-arm/package.json').version
+        if (bindingPackageVersion !== '2.10.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') {
+          throw new Error(`Native binding package version mismatch, expected 2.10.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`)
+        }
+        return binding
       } catch (e) {
@@ -399,7 +563,10 @@ loadErrors.push(e)
 if (!nativeBinding || process.env.NAPI_RS_FORCE_WASI) {
+  let wasiBinding = null
+  let wasiBindingError = null
   try {
-    nativeBinding = require('./cli.wasi.cjs')
+    wasiBinding = require('./cli.wasi.cjs')
+    nativeBinding = wasiBinding
   } catch (err) {
     if (process.env.NAPI_RS_FORCE_WASI) {
-      loadErrors.push(err)
+      wasiBindingError = err
     }
@@ -409,5 +576,7 @@ }
     try {
-      nativeBinding = require('@tauri-apps/cli-wasm32-wasi')
+      wasiBinding = require('@tauri-apps/cli-wasm32-wasi')
+      nativeBinding = wasiBinding
     } catch (err) {
       if (process.env.NAPI_RS_FORCE_WASI) {
+        wasiBindingError.cause = err
         loadErrors.push(err)
@@ -417,2 +586,7 @@ }
   }
+  if (process.env.NAPI_RS_FORCE_WASI === 'error' && !wasiBinding) {
+    const error = new Error('WASI binding not found and NAPI_RS_FORCE_WASI is set to error')
+    error.cause = wasiBindingError
+    throw error
+  }
 }
@@ -426,3 +600,8 @@
         'Please try `npm i` again after removing both package-lock.json and node_modules directory.',
-      { cause: loadErrors }
+      {
+        cause: loadErrors.reduce((err, cur) => {
+          cur.cause = err
+          return cur
+        }),
+      },
     )
@@ -429,0 +608,0 @@ }

package.json

 {
   "name": "@tauri-apps/cli",
-  "version": "2.10.0",
+  "version": "2.10.1",
   "description": "Command line interface for building Tauri apps",
@@ -68,14 +68,14 @@ "type": "commonjs",
   "optionalDependencies": {
-    "@tauri-apps/cli-linux-x64-gnu": "2.10.0",
-    "@tauri-apps/cli-win32-x64-msvc": "2.10.0",
-    "@tauri-apps/cli-darwin-x64": "2.10.0",
-    "@tauri-apps/cli-darwin-arm64": "2.10.0",
-    "@tauri-apps/cli-linux-arm64-gnu": "2.10.0",
-    "@tauri-apps/cli-linux-arm64-musl": "2.10.0",
-    "@tauri-apps/cli-linux-arm-gnueabihf": "2.10.0",
-    "@tauri-apps/cli-linux-x64-musl": "2.10.0",
-    "@tauri-apps/cli-linux-riscv64-gnu": "2.10.0",
-    "@tauri-apps/cli-win32-ia32-msvc": "2.10.0",
-    "@tauri-apps/cli-win32-arm64-msvc": "2.10.0"
+    "@tauri-apps/cli-linux-x64-gnu": "2.10.1",
+    "@tauri-apps/cli-win32-x64-msvc": "2.10.1",
+    "@tauri-apps/cli-darwin-x64": "2.10.1",
+    "@tauri-apps/cli-darwin-arm64": "2.10.1",
+    "@tauri-apps/cli-linux-arm64-gnu": "2.10.1",
+    "@tauri-apps/cli-linux-arm64-musl": "2.10.1",
+    "@tauri-apps/cli-linux-arm-gnueabihf": "2.10.1",
+    "@tauri-apps/cli-linux-x64-musl": "2.10.1",
+    "@tauri-apps/cli-linux-riscv64-gnu": "2.10.1",
+    "@tauri-apps/cli-win32-ia32-msvc": "2.10.1",
+    "@tauri-apps/cli-win32-arm64-msvc": "2.10.1"
   }
 }

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

371359

4.21%

Lines of code

4604

4.07%

Worsened metrics

Number of low supply chain risk alerts

64

481.82%

No dependency changes