@zereight/mcp-gitlab - npm Package Compare versions

Comparing version 2.0.24 to 2.0.25

package.json

 {
   "name": "@zereight/mcp-gitlab",
-  "version": "2.0.24",
+  "version": "2.0.25",
   "description": "MCP server for using the GitLab API",
@@ -44,2 +44,3 @@ "license": "MIT",
   "dependencies": {
+    "@modelcontextprotocol/sdk": "^1.24.2",
     "@types/node-fetch": "^2.6.12",
@@ -57,5 +58,5 @@ "express": "^5.1.0",
     "socks-proxy-agent": "^8.0.5",
+    "tldts": "^6.1.86",
     "tough-cookie": "^5.1.2",
     "zod": "^3.24.2",
-    "@modelcontextprotocol/sdk": "^1.24.2",
     "zod-to-json-schema": "3.24.5"
@@ -62,0 +63,0 @@ },

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 6 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 24 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 6 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 24 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

552374

0.07%

Lines of code

12333

0.06%

Worsened metrics

Dependency count

17

6.25%

Dependency changes

• + Added

  tldts@^6.1.86