@vercel/static-build - npm Package Compare versions

Comparing version 0.17.11 to 0.17.12-canary.0

package.json

 {
   "name": "@vercel/static-build",
-  "version": "0.17.11",
+  "version": "0.17.12-canary.0",
   "license": "MIT",
@@ -22,2 +22,3 @@ "main": "./dist/index",
   "devDependencies": {
+    "@types/aws-lambda": "8.10.64",
     "@types/cross-spawn": "6.0.0",
@@ -34,3 +35,3 @@ "@types/ms": "0.7.31",
   },
-  "gitHead": "1bfa310945831e9d1204122557bae16d0c6bfe5a"
+  "gitHead": "c759bfda9c622562eab8ab35765c65f8845ac371"
 }

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

516414

increased by11.3%

Number of package files

9

increased by200%

Lines of code

7890

increased by22.36%

Worsened metrics

Dev dependency count

11

increased by10%

Number of low supply chain risk alerts

41

increased by86.36%

Number of medium supply chain risk alerts

14

increased by16.67%

No dependency changes