braintrust - npm Package Compare versions

Comparing version 0.0.125 to 0.0.126

package.json

 {
   "name": "braintrust",
-  "version": "0.0.125",
+  "version": "0.0.126",
   "description": "SDK for integrating Braintrust",
@@ -49,5 +49,7 @@ "main": "./dist/index.js",
     "@braintrust/core": "0.0.34",
+    "@next/env": "^14.2.3",
     "argparse": "^2.0.1",
     "chalk": "^4.1.2",
     "cli-progress": "^3.12.0",
+    "dotenv": "^16.4.5",
     "esbuild": "^0.18.20",
@@ -54,0 +56,0 @@ "graceful-fs": "^4.2.11",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1939763

increased by1.52%

Lines of code

53987

increased by1.44%

Worsened metrics

Dependency count

14

increased by16.67%

Number of low supply chain risk alerts

58

increased by70.59%

Dependency changes

• + Added@next/env@^14.2.3

• + Addeddotenv@^16.4.5

• + Added@next/env@14.2.24(transitive)

• + Addeddotenv@16.4.7(transitive)