@vltpkg/registry-client
Advanced tools
@vltpkg/registry-client - npm Package Compare versions
+9
-9
| { | ||
| "name": "@vltpkg/registry-client", | ||
| "description": "Fetch package artifacts and metadata from registries", | ||
| "version": "1.0.0-rc.11", | ||
| "version": "1.0.0-rc.12", | ||
| "repository": { | ||
@@ -15,10 +15,10 @@ "type": "git", | ||
| "undici": "^7.16.0", | ||
| "@vltpkg/cache-unzip": "1.0.0-rc.11", | ||
| "@vltpkg/error-cause": "1.0.0-rc.11", | ||
| "@vltpkg/cache": "1.0.0-rc.11", | ||
| "@vltpkg/keychain": "1.0.0-rc.11", | ||
| "@vltpkg/types": "1.0.0-rc.11", | ||
| "@vltpkg/output": "1.0.0-rc.11", | ||
| "@vltpkg/url-open": "1.0.0-rc.11", | ||
| "@vltpkg/xdg": "1.0.0-rc.11" | ||
| "@vltpkg/cache": "1.0.0-rc.12", | ||
| "@vltpkg/cache-unzip": "1.0.0-rc.12", | ||
| "@vltpkg/error-cause": "1.0.0-rc.12", | ||
| "@vltpkg/keychain": "1.0.0-rc.12", | ||
| "@vltpkg/output": "1.0.0-rc.12", | ||
| "@vltpkg/types": "1.0.0-rc.12", | ||
| "@vltpkg/url-open": "1.0.0-rc.12", | ||
| "@vltpkg/xdg": "1.0.0-rc.12" | ||
| }, | ||
@@ -25,0 +25,0 @@ "devDependencies": { |
New alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 6 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Fixed alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 6 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
Improved metrics
- Number of medium supply chain risk alerts
10
-9.09%Dependency changes
+ Added
@vltpkg/cache@1.0.0-rc.12(transitive)+ Added
@vltpkg/cache-unzip@1.0.0-rc.12(transitive)+ Added
@vltpkg/dep-id@1.0.0-rc.12(transitive)+ Added
@vltpkg/error-cause@1.0.0-rc.12(transitive)+ Added
@vltpkg/fast-split@1.0.0-rc.12(transitive)+ Added
@vltpkg/keychain@1.0.0-rc.12(transitive)+ Added
@vltpkg/output@1.0.0-rc.12(transitive)+ Added
@vltpkg/promise-spawn@1.0.0-rc.12(transitive)+ Added
@vltpkg/semver@1.0.0-rc.12(transitive)+ Added
@vltpkg/spec@1.0.0-rc.12(transitive)+ Added
@vltpkg/types@1.0.0-rc.12(transitive)+ Added
@vltpkg/url-open@1.0.0-rc.12(transitive)+ Added
@vltpkg/which@1.0.0-rc.12(transitive)+ Added
@vltpkg/xdg@1.0.0-rc.12(transitive)- Removed
@vltpkg/cache@1.0.0-rc.11(transitive)- Removed
@vltpkg/cache-unzip@1.0.0-rc.11(transitive)- Removed
@vltpkg/dep-id@1.0.0-rc.11(transitive)- Removed
@vltpkg/error-cause@1.0.0-rc.11(transitive)- Removed
@vltpkg/fast-split@1.0.0-rc.11(transitive)- Removed
@vltpkg/keychain@1.0.0-rc.11(transitive)- Removed
@vltpkg/output@1.0.0-rc.11(transitive)- Removed
@vltpkg/promise-spawn@1.0.0-rc.11(transitive)- Removed
@vltpkg/semver@1.0.0-rc.11(transitive)- Removed
@vltpkg/spec@1.0.0-rc.11(transitive)- Removed
@vltpkg/types@1.0.0-rc.11(transitive)- Removed
@vltpkg/url-open@1.0.0-rc.11(transitive)- Removed
@vltpkg/which@1.0.0-rc.11(transitive)- Removed
@vltpkg/xdg@1.0.0-rc.11(transitive)Updated
@vltpkg/cache@1.0.0-rc.12Updated
@vltpkg/keychain@1.0.0-rc.12Updated
@vltpkg/output@1.0.0-rc.12Updated
@vltpkg/types@1.0.0-rc.12Updated
@vltpkg/url-open@1.0.0-rc.12Updated
@vltpkg/xdg@1.0.0-rc.12