@vercel/build-utils
Advanced tools
@vercel/build-utils - npm Package Compare versions
+7
-0
| # @vercel/build-utils | ||
| ## 13.8.1 | ||
| ### Patch Changes | ||
| - Updated dependencies [[`3c4355fa1414aa3270ba4d36423aa647d49a9cf3`](https://github.com/vercel/vercel/commit/3c4355fa1414aa3270ba4d36423aa647d49a9cf3), [`267223f86eb578cc740db501fb2c2cbf43a27b37`](https://github.com/vercel/vercel/commit/267223f86eb578cc740db501fb2c2cbf43a27b37), [`e9a791d0fa04ef58695535fa508554415137fb58`](https://github.com/vercel/vercel/commit/e9a791d0fa04ef58695535fa508554415137fb58), [`12811e7bc827900d534aa25f5f3e2331a80ca6a8`](https://github.com/vercel/vercel/commit/12811e7bc827900d534aa25f5f3e2331a80ca6a8)]: | ||
| - @vercel/python-analysis@0.10.0 | ||
| ## 13.8.0 | ||
@@ -4,0 +11,0 @@ |
+2
-2
| { | ||
| "name": "@vercel/build-utils", | ||
| "version": "13.8.0", | ||
| "version": "13.8.1", | ||
| "license": "Apache-2.0", | ||
@@ -14,3 +14,3 @@ "main": "./dist/index.js", | ||
| "dependencies": { | ||
| "@vercel/python-analysis": "0.9.1" | ||
| "@vercel/python-analysis": "0.10.0" | ||
| }, | ||
@@ -17,0 +17,0 @@ "devDependencies": { |
New alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 11 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Fixed alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 11 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
1413630
0.04%Dependency changes
+ Added
@vercel/python-analysis@0.10.0(transitive)- Removed
@vercel/python-analysis@0.9.1(transitive)- Removed
ohm-js@17.5.0(transitive)- Removed
pip-requirements-js@1.0.3(transitive)