@tonclient/lib-node - npm Package Compare versions

Comparing version 1.27.0 to 1.27.1

build/src/main.rs

 /*
- * Copyright 2018-2020 TON DEV SOLUTIONS LTD.
+ * Copyright 2018-2020 TON Labs LTD.
  *
@@ -4,0 +4,0 @@ * Licensed under the SOFTWARE EVALUATION License (the "License"); you may not use

index.d.ts

 /*
- * Copyright 2018-2020 TON DEV SOLUTIONS LTD.
+ * Copyright 2018-2020 TON Labs LTD.
  *
@@ -4,0 +4,0 @@ * Licensed under the SOFTWARE EVALUATION License (the "License"); you may not use

index.js

 /*
- * Copyright 2018-2020 TON DEV SOLUTIONS LTD.
+ * Copyright 2018-2020 TON Labs LTD.
  *
@@ -4,0 +4,0 @@ * Licensed under the SOFTWARE EVALUATION License (the "License"); you may not use

install.js

 /*
- * Copyright 2018-2020 TON DEV SOLUTIONS LTD.
+ * Copyright 2018-2020 TON Labs LTD.
  *
@@ -4,0 +4,0 @@ * Licensed under the SOFTWARE EVALUATION License (the "License"); you may not use

lib/Cargo.toml

@@ -13,5 +13,5 @@ [package]
 libc = "0.2"
-ton_client = { git = "https://github.com/tonlabs/TON-SDK.git" }
+ton_client = { git = "https://github.com/tonlabs/TON-SDK.git", tag = "1.27.1" }
 
 [profile.release]
 lto = true

lib/src/lib.rs

 /*
-* Copyright 2018-2020 TON DEV SOLUTIONS LTD.
+* Copyright 2018-2020 TON Labs LTD.
 *
@@ -4,0 +4,0 @@ * Licensed under the SOFTWARE EVALUATION License (the "License"); you may not use

package.json

 {
 	"name": "@tonclient/lib-node",
-	"version": "1.27.0",
+	"version": "1.27.1",
 	"description": "TON Client NodeJs AddOn",
@@ -22,3 +22,3 @@ "repository": {
 	],
-	"author": "TON DEV SOLUTIONS LTD.",
+	"author": "TON Labs LTD.",
 	"license": "Apache-2.0",
@@ -25,0 +25,0 @@ "licenses": [

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Potential vulnerability

Supply chain risk

Initial human review suggests the presence of a vulnerability in this package. It is pending further analysis and confirmation.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Unidentified License

License

Something that seems like a license was found, but its contents could not be matched with a known license.

Found 2 instances in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Unidentified License

License

Something that seems like a license was found, but its contents could not be matched with a known license.

Found 2 instances in 1 package

Worsened metrics

Total package byte prevSize

19850

-0.19%

Number of medium supply chain risk alerts

3

50%

No dependency changes