@vercel/node
Advanced tools
@vercel/node - npm Package Compare versions
+4
-4
| { | ||
| "name": "@vercel/node", | ||
| "version": "2.0.2-canary.0", | ||
| "version": "2.1.0", | ||
| "license": "MIT", | ||
@@ -48,6 +48,6 @@ "main": "./dist/index", | ||
| "@types/test-listen": "1.1.0", | ||
| "@vercel/build-utils": "4.0.1-canary.0", | ||
| "@vercel/build-utils": "4.1.0", | ||
| "@vercel/ncc": "0.24.0", | ||
| "@vercel/nft": "0.19.1", | ||
| "@vercel/static-config": "2.0.1-canary.0", | ||
| "@vercel/static-config": "2.0.1", | ||
| "content-type": "1.0.4", | ||
@@ -60,3 +60,3 @@ "cookie": "0.4.0", | ||
| }, | ||
| "gitHead": "39f758662131ec37c467ebba5d5b618cba0c753f" | ||
| "gitHead": "0c7b54edad6adf48505abf2cbec01691b85963bb" | ||
| } |
New alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 5 instances in 1 package
Fixed alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 5 instances in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
Improved metrics
- Number of low quality alerts
0
-100%- Number of medium supply chain risk alerts
4
-20%Worsened metrics
- Total package byte prevSize
15324816
0