@uniformdev/cli - npm Package Compare versions

Comparing version 20.7.1-alpha.123 to 20.7.1-alpha.134

LICENSE.txt

@@ -1,2 +0,2 @@
-© 2025 Uniform Systems, Inc. All Rights Reserved.
+© 2026 Uniform Systems, Inc. All Rights Reserved.
 See details of Uniform Systems, Inc. Master Subscription Agreement here: https://uniform.dev/eula

package.json

 {
   "name": "@uniformdev/cli",
-  "version": "20.7.1-alpha.123+2f94c7c7d8",
+  "version": "20.7.1-alpha.134+97fe4134d7",
   "description": "Uniform command line interface tool",
@@ -31,9 +31,9 @@ "license": "SEE LICENSE IN LICENSE.txt",
     "@thi.ng/mime": "^2.2.23",
-    "@uniformdev/assets": "20.7.1-alpha.123+2f94c7c7d8",
-    "@uniformdev/canvas": "20.7.1-alpha.123+2f94c7c7d8",
-    "@uniformdev/context": "20.7.1-alpha.123+2f94c7c7d8",
-    "@uniformdev/files": "20.7.1-alpha.123+2f94c7c7d8",
-    "@uniformdev/project-map": "20.7.1-alpha.123+2f94c7c7d8",
-    "@uniformdev/redirect": "20.7.1-alpha.123+2f94c7c7d8",
-    "@uniformdev/richtext": "20.7.1-alpha.123+2f94c7c7d8",
+    "@uniformdev/assets": "20.7.1-alpha.134+97fe4134d7",
+    "@uniformdev/canvas": "20.7.1-alpha.134+97fe4134d7",
+    "@uniformdev/context": "20.7.1-alpha.134+97fe4134d7",
+    "@uniformdev/files": "20.7.1-alpha.134+97fe4134d7",
+    "@uniformdev/project-map": "20.7.1-alpha.134+97fe4134d7",
+    "@uniformdev/redirect": "20.7.1-alpha.134+97fe4134d7",
+    "@uniformdev/richtext": "20.7.1-alpha.134+97fe4134d7",
     "call-bind": "^1.0.2",
@@ -54,3 +54,3 @@ "colorette": "2.0.20",
     "js-yaml": "^4.1.0",
-    "jsonwebtoken": "9.0.2",
+    "jsonwebtoken": "9.0.3",
     "mitt": "^3.0.1",
@@ -61,3 +61,3 @@ "normalize-newline": "^4.1.0",
     "p-queue": "7.3.4",
-    "posthog-node": "4.11.3",
+    "posthog-node": "5.10.3",
     "registry-auth-token": "^5.0.0",
@@ -69,3 +69,3 @@ "registry-url": "^6.0.0",
     "yargs": "^17.6.2",
-    "zod": "3.23.8"
+    "zod": "3.25.76"
   },
@@ -88,3 +88,3 @@ "devDependencies": {
   },
-  "gitHead": "2f94c7c7d825e4d5fb92122c706fb4efa4922993"
+  "gitHead": "97fe4134d72fb8c0b3a3432e1a6a410fdedeedb4"
 }

New alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 25 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 25 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

446166

0.06%

Lines of code

12975

0.04%

Worsened metrics

Number of low supply chain risk alerts

312

0.32%

Dependency changes

• + Added

  @posthog/core@1.3.1
  (transitive)

• + Added

  jsonwebtoken@9.0.3
  (transitive)

• + Added

  jwa@2.0.1
  (transitive)

• + Added

  jws@4.0.1
  (transitive)

• + Added

  posthog-node@5.10.3
  (transitive)

• + Added

  zod@3.25.76
  (transitive)

• - Removed

  agent-base@6.0.2
  (transitive)

• - Removed

  asynckit@0.4.0
  (transitive)

• - Removed

  axios@1.16.1
  (transitive)

• - Removed

  combined-stream@1.0.8
  (transitive)

• - Removed

  delayed-stream@1.0.0
  (transitive)

• - Removed

  es-set-tostringtag@2.1.0
  (transitive)

• - Removed

  follow-redirects@1.16.0
  (transitive)

• - Removed

  form-data@4.0.5
  (transitive)

• - Removed

  https-proxy-agent@5.0.1
  (transitive)

• - Removed

  jsonwebtoken@9.0.2
  (transitive)

• - Removed

  jwa@1.4.2
  (transitive)

• - Removed

  jws@3.2.3
  (transitive)

• - Removed

  mime-db@1.52.0
  (transitive)

• - Removed

  mime-types@2.1.35
  (transitive)

• - Removed

  posthog-node@4.11.3
  (transitive)

• - Removed

  proxy-from-env@2.1.0
  (transitive)

• - Removed

  zod@3.23.8
  (transitive)

• Updated

  @uniformdev/assets@20.7.1-alpha.134+97fe4134d7

• Updated

  @uniformdev/canvas@20.7.1-alpha.134+97fe4134d7

• Updated

  @uniformdev/context@20.7.1-alpha.134+97fe4134d7

• Updated

  @uniformdev/files@20.7.1-alpha.134+97fe4134d7

• Updated

  @uniformdev/project-map@20.7.1-alpha.134+97fe4134d7

• Updated

  @uniformdev/redirect@20.7.1-alpha.134+97fe4134d7

• Updated

  @uniformdev/richtext@20.7.1-alpha.134+97fe4134d7

• Updated

  jsonwebtoken@9.0.3

• Updated

  posthog-node@5.10.3

• Updated

  zod@3.25.76