@tryghost/admin-api
Advanced tools
@tryghost/admin-api - npm Package Compare versions
+1
-1
| MIT License | ||
| Copyright (c) 2013-2025 Ghost Foundation | ||
| Copyright (c) 2013-2026 Ghost Foundation | ||
@@ -5,0 +5,0 @@ Permission is hereby granted, free of charge, to any person obtaining a copy |
+7
-7
| { | ||
| "name": "@tryghost/admin-api", | ||
| "version": "1.14.4", | ||
| "version": "1.14.5", | ||
| "repository": { | ||
@@ -21,3 +21,3 @@ "type": "git", | ||
| "dev": "echo \"Implement me!\"", | ||
| "test": "NODE_ENV=testing c8 --all --reporter text --reporter cobertura mocha './test/**/*.test.js'", | ||
| "test": "NODE_ENV=testing c8 --reporter text --reporter cobertura mocha './test/**/*.test.js'", | ||
| "lint": "eslint . --ext .js --cache", | ||
@@ -30,3 +30,3 @@ "posttest": "yarn lint" | ||
| "devDependencies": { | ||
| "c8": "10.1.3", | ||
| "c8": "11.0.0", | ||
| "mocha": "11.7.5", | ||
@@ -37,7 +37,7 @@ "should": "13.2.3", | ||
| "dependencies": { | ||
| "axios": "^1.0.0", | ||
| "form-data": "^4.0.0", | ||
| "jsonwebtoken": "^9.0.2" | ||
| "axios": "1.13.5", | ||
| "form-data": "4.0.5", | ||
| "jsonwebtoken": "9.0.3" | ||
| }, | ||
| "gitHead": "a5b249c5514742350f74bcb30b332977d373598a" | ||
| "gitHead": "2c937c80e98d9bad4458e1c2e9d6f6b138bd308e" | ||
| } |
+1
-1
@@ -43,2 +43,2 @@ # Admin Api | ||
| Copyright (c) 2013-2025 Ghost Foundation - Released under the [MIT license](LICENSE). | ||
| Copyright (c) 2013-2026 Ghost Foundation - Released under the [MIT license](LICENSE). |
New alerts
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Fixed alerts
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Improved metrics
- Number of medium supply chain risk alerts
0
-100%Worsened metrics
- Total package byte prevSize
19040
-0.04%Dependency changes
+ Added
axios@1.13.5(transitive)+ Added
proxy-from-env@1.1.0(transitive)- Removed
agent-base@6.0.2(transitive)- Removed
axios@1.16.1(transitive)- Removed
debug@4.4.3(transitive)- Removed
https-proxy-agent@5.0.1(transitive)- Removed
proxy-from-env@2.1.0(transitive)Updated
axios@1.13.5Updated
form-data@4.0.5Updated
jsonwebtoken@9.0.3