chainsql-binary-codec - npm Package Compare versions

Comparing version 1.0.7 to 1.0.8

distrib/npm/enums/definitions.json

@@ -1645,6 +1645,6 @@ {
     ],
-	[
-      "Table",
+    [
+      "Signer",
       {
-        "nth": 50,
+        "nth": 16,
         "isVLEncoded": false,
@@ -1657,5 +1657,5 @@ "isSerialized": true,
     [
-      "Rule",
+      "Majority",
       {
-        "nth": 51,
+        "nth": 18,
         "isVLEncoded": false,
@@ -1668,5 +1668,5 @@ "isSerialized": true,
     [
-      "Signer",
+      "Table",
       {
-        "nth": 16,
+        "nth": 50,
         "isVLEncoded": false,
@@ -1679,5 +1679,5 @@ "isSerialized": true,
     [
-      "WhiteList",
+      "Rule",
       {
-        "nth": 54,
+        "nth": 51,
         "isVLEncoded": false,
@@ -1690,5 +1690,5 @@ "isSerialized": true,
     [
-      "Majority",
+      "Validator",
       {
-        "nth": 18,
+        "nth": 52,
         "isVLEncoded": false,
@@ -1701,5 +1701,5 @@ "isSerialized": true,
     [
-      "Validator",
+      "Peer",
       {
-        "nth": 51,
+        "nth": 53,
         "isVLEncoded": false,
@@ -1712,5 +1712,5 @@ "isSerialized": true,
     [
-      "Peer",
+      "WhiteList",
       {
-        "nth": 52,
+        "nth": 54,
         "isVLEncoded": false,
@@ -1717,0 +1717,0 @@ "isSerialized": true,

package.json

 {
   "name": "chainsql-binary-codec",
-  "version": "1.0.7",
+  "version": "1.0.8",
   "description": "chainsql binary codec",
@@ -5,0 +5,0 @@ "files": [

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

928820

0

No dependency changes