army - Package Alerts
Unpopular package
QualityThis package is not very popular.
Found 1 instance in 1 package
AI-detected potential security risk
Supply chain riskAI has determined that this package may contain potential security issues or vulnerabilities.
Found 1 instance in 1 package
Unmaintained
MaintenancePackage has not been updated in more than 5 years and may be unmaintained. Problems with the package may go unaddressed.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
High CVE
VulnerabilityContains a high severity Common Vulnerability and Exposure (CVE).
Found 6 instances in 3 packages
Deprecated
MaintenanceThe maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.
Found 3 instances in 3 packages
Non-existent author
Supply chain riskThe package was published by an npm account that no longer exists.
Found 2 instances in 2 packages
Medium CVE
VulnerabilityContains a medium severity Common Vulnerability and Exposure (CVE).
Found 4 instances in 3 packages
Network access
Supply chain riskThis module accesses the network.
Found 2 instances in 2 packages
Wildcard dependency
QualityPackage has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.
Found 2 instances in 2 packages
Unmaintained
MaintenancePackage has not been updated in more than 5 years and may be unmaintained. Problems with the package may go unaddressed.
Found 5 instances in 5 packages
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 3 instances in 3 packages
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 2 instances in 2 packages
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 4 instances in 4 packages
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 4 instances in 4 packages
Low CVE
VulnerabilityContains a low severity Common Vulnerability and Exposure (CVE).
Found 4 instances in 3 packages
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 2 instances in 2 packages