@vercel/static-build - npm Package Compare versions

Comparing version 0.16.1-canary.5 to 0.16.1-canary.6

package.json

 {
   "name": "@vercel/static-build",
-  "version": "0.16.1-canary.5",
+  "version": "0.16.1-canary.6",
   "license": "MIT",
@@ -32,3 +32,3 @@ "main": "./dist/index",
   },
-  "gitHead": "898478d1e1712a761c6e87878ef6831c2a793767"
+  "gitHead": "2e0cee490d06c582896f2467ddfb422cfe99327d"
 }

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

24

decreased by-4%

Number of medium supply chain risk alerts

32

decreased by-3.03%

Worsened metrics

Total package byte prevSize

707152

decreased by-0.01%

Lines of code

14605

decreased by-0.01%

No dependency changes