@vitest/mocker
Advanced tools
+5
-5
| { | ||
| "name": "@vitest/mocker", | ||
| "type": "module", | ||
| "version": "4.1.0-beta.6", | ||
| "version": "4.1.0", | ||
| "description": "Vitest module mocker implementation", | ||
@@ -67,3 +67,3 @@ "license": "MIT", | ||
| "msw": "^2.4.9", | ||
| "vite": "^6.0.0 || ^7.0.0-0" | ||
| "vite": "^6.0.0 || ^7.0.0 || ^8.0.0-0" | ||
| }, | ||
@@ -81,3 +81,3 @@ "peerDependenciesMeta": { | ||
| "magic-string": "^0.30.21", | ||
| "@vitest/spy": "4.1.0-beta.6" | ||
| "@vitest/spy": "4.1.0" | ||
| }, | ||
@@ -92,4 +92,4 @@ "devDependencies": { | ||
| "vite": "^6.3.5", | ||
| "@vitest/spy": "4.1.0-beta.6", | ||
| "@vitest/utils": "4.1.0-beta.6" | ||
| "@vitest/spy": "4.1.0", | ||
| "@vitest/utils": "4.1.0" | ||
| }, | ||
@@ -96,0 +96,0 @@ "scripts": { |
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
1
-50%186803
-0.01%+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
- Removed
Updated