build-strap - npm Package Compare versions

Comparing version 5.0.6 to 5.0.7-dev.116

package.json

 {
   "name": "build-strap",
-  "version": "5.0.6",
+  "version": "5.0.7-dev.116",
   "description": "Node scripts for building things",
@@ -5,0 +5,0 @@ "license": "MIT",

src/env.js

@@ -69,3 +69,6 @@ import fs from 'fs-extra';
     try {
-        return (await spawn(shell, ['-c', `${refreshEnv ? `source ${envFile} && ` : ''}printenv ${name}`], {
+        return (await spawn(shell, [
+            '-c',
+            `${refreshEnv ? `source ${envFile} > /dev/null 2>&1  && ` : ''}printenv ${name}`,
+        ], {
             captureOutput: true,
@@ -72,0 +75,0 @@ env: {

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 8 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 8 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

148985

0.04%

Lines of code

3504

0.09%

Worsened metrics

Number of low quality alerts

2

100%

No dependency changes