cluc - npm Package Compare versions

Comparing version 1.0.43 to 1.0.44

package.json

 {
   "name": "cluc",
-  "version": "1.0.43",
+  "version": "1.0.44",
   "description": "command line under control",
@@ -28,3 +28,3 @@ "main": "main.js",
     "progress": "^1.1.8",
-    "ssh2-utils": "maboiteaspam/ssh2-utils",
+    "ssh2-utils": "^1.0.28",
     "symbolsjs": "^1.0.0",
@@ -31,0 +31,0 @@ "temp": "^0.8.1",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

GitHub dependency

Supply chain risk

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

117041

increased by0.06%

Number of package files

21

increased by5%

Number of high supply chain risk alerts

1

decreased by-50%

Number of medium supply chain risk alerts

2

decreased by-33.33%

Dependency changes

• + Addedasn1@0.2.6(transitive)

• + Addedbcrypt-pbkdf@1.0.2(transitive)

• + Addedbuildcheck@0.0.6(transitive)

• + Addedcpu-features@0.0.10(transitive)

• + Addedisarray@0.0.1(transitive)

• + Addednan@2.22.0(transitive)

• + Addedpath@0.11.14(transitive)

• + Addedreadable-stream@1.0.34(transitive)

• + Addedsafer-buffer@2.1.2(transitive)

• + Addedssh2@0.4.151.16.0(transitive)

• + Addedssh2-streams@0.0.23(transitive)

• + Addedssh2-utils@1.0.28(transitive)

• + Addedssh2shell@1.9.10(transitive)

• + Addedstreamsearch@0.1.2(transitive)

• + Addedstring_decoder@0.10.31(transitive)

• + Addedtweetnacl@0.14.5(transitive)

• Updatedssh2-utils@^1.0.28