coinhive-firefox - npm Package Compare versions

Comparing version 1.0.4 to 1.1.0

package.json

 {
   "name": "coinhive-firefox",
-  "version": "1.0.4",
+  "version": "1.1.0",
   "description": "",
-  "main": "src/index.js",
+  "main": "index.js",
   "scripts": {
-    "test": "mocha test --timeout 600000"
+    "test": "echo \"Error: no test specified\" && exit 1"
   },
-  "license": "MIT",
-  "dependencies": {
-    "coin-hive-stratum": "^1.4.7",
-    "elegant-spinner": "^1.0.1",
-    "express": "^4.15.4",
-    "log-update": "^2.1.0",
-    "minimist": "^1.2.0",
-    "puppeteer-firefox": "^1.0.0",
-    "tty-table": "^2.5.5"
-  },
-  "bin": {
-    "coinhive-firefox": "./bin/coinhive-firefox"
-  },
-  "devDependencies": {
-    "expect": "^21.1.0",
-    "mocha": "^3.5.3"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/cazala/coin-hive.git"
-  },
-  "engines": {
-    "node": ">=8.0",
-    "npm": ">=5.0"
-  },
-  "keywords": [
-    "coinhive",
-    "monero",
-    "electroneum",
-    "xmr",
-    "etn",
-    "crypto",
-    "cryptocurrency",
-    "cryptocurrencies",
-    "mining",
-    "miner"
-  ]
+  "keywords": [],
+  "author": "",
+  "license": "ISC"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No README

Quality

Package does not have a README. This may indicate a failed publish or a low quality package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No contributors or author data

Maintenance

Package does not specify a list of contributors or an author in package.json.

Found 1 instance in 1 package

Improved metrics

Dependency count

0

decreased by-100%

Dev dependency count

0

decreased by-100%

Number of low supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

230

decreased by-99.27%

Number of package files

1

decreased by-92.31%

Lines of code

0

decreased by-100%

Number of low quality alerts

2

increased by100%

Number of medium quality alerts

2

increased by100%

Number of lines in readme file

0

decreased by-100%

Number of medium supply chain risk alerts

3

increased byInfinity%

Dependency changes

• - Removedcoin-hive-stratum@^1.4.7

• - Removedelegant-spinner@^1.0.1

• - Removedexpress@^4.15.4

• - Removedlog-update@^2.1.0

• - Removedminimist@^1.2.0

• - Removedpuppeteer-firefox@^1.0.0

• - Removedtty-table@^2.5.5

• - Removedaccepts@1.3.8(transitive)

• - Removedansi-escapes@3.2.0(transitive)

• - Removedansi-regex@3.0.15.0.1(transitive)

• - Removedansi-styles@4.3.0(transitive)

• - Removedarray-flatten@1.1.1(transitive)

• - Removedasync-limiter@1.0.1(transitive)

• - Removedbody-parser@1.20.3(transitive)

• - Removedbreakword@1.0.6(transitive)

• - Removedbytes@3.1.2(transitive)

• - Removedcall-bind-apply-helpers@1.0.1(transitive)

• - Removedcall-bound@1.0.3(transitive)

• - Removedcamelcase@5.3.1(transitive)

• - Removedchalk@3.0.0(transitive)

• - Removedcli-cursor@2.1.0(transitive)

• - Removedcliui@6.0.0(transitive)

• - Removedclone@1.0.4(transitive)

• - Removedcoin-hive-stratum@1.4.10(transitive)

• - Removedcolor-convert@2.0.1(transitive)

• - Removedcolor-name@1.1.4(transitive)

• - Removedcontent-disposition@0.5.4(transitive)

• - Removedcontent-type@1.0.5(transitive)

• - Removedcookie@0.7.1(transitive)

• - Removedcookie-signature@1.0.6(transitive)

• - Removedcsv@5.5.3(transitive)

• - Removedcsv-generate@3.4.3(transitive)

• - Removedcsv-parse@4.16.3(transitive)

• - Removedcsv-stringify@5.6.5(transitive)

• - Removeddebug@2.6.9(transitive)

• - Removeddecamelize@1.2.0(transitive)

• - Removeddefaults@1.0.4(transitive)

• - Removeddepd@2.0.0(transitive)

• - Removeddestroy@1.2.0(transitive)

• - Removeddunder-proto@1.0.1(transitive)

• - Removedee-first@1.1.1(transitive)

• - Removedelegant-spinner@1.0.1(transitive)

• - Removedemoji-regex@8.0.0(transitive)

• - Removedencodeurl@1.0.22.0.0(transitive)

• - Removedes-define-property@1.0.1(transitive)

• - Removedes-errors@1.3.0(transitive)

• - Removedes-object-atoms@1.0.0(transitive)

• - Removedescape-html@1.0.3(transitive)

• - Removedetag@1.8.1(transitive)

• - Removedexpress@4.21.2(transitive)

• - Removedfinalhandler@1.3.1(transitive)

• - Removedfind-up@4.1.0(transitive)

• - Removedforwarded@0.2.0(transitive)

• - Removedfresh@0.5.2(transitive)

• - Removedfunction-bind@1.1.2(transitive)

• - Removedget-caller-file@2.0.5(transitive)

• - Removedget-intrinsic@1.2.6(transitive)

• - Removedgopd@1.2.0(transitive)

• - Removedgrapheme-splitter@1.0.4(transitive)

• - Removedhas-flag@4.0.0(transitive)

• - Removedhas-symbols@1.1.0(transitive)

• - Removedhasown@2.0.2(transitive)

• - Removedhttp-errors@2.0.0(transitive)

• - Removediconv-lite@0.4.24(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedipaddr.js@1.9.1(transitive)

• - Removedis-fullwidth-code-point@2.0.03.0.0(transitive)

• - Removedlocate-path@5.0.0(transitive)

• - Removedlog-update@2.3.0(transitive)

• - Removedmath-intrinsics@1.1.0(transitive)

• - Removedmedia-typer@0.3.0(transitive)

• - Removedmerge-descriptors@1.0.3(transitive)

• - Removedmethods@1.1.2(transitive)

• - Removedmime@1.6.0(transitive)

• - Removedmime-db@1.52.0(transitive)

• - Removedmime-types@2.1.35(transitive)

• - Removedmimic-fn@1.2.0(transitive)

• - Removedminimist@1.2.8(transitive)

• - Removedmixme@0.5.10(transitive)

• - Removedmoment@2.30.1(transitive)

• - Removedms@2.0.02.1.3(transitive)

• - Removednegotiator@0.6.3(transitive)

• - Removedobject-inspect@1.13.3(transitive)

• - Removedon-finished@2.4.1(transitive)

• - Removedonetime@2.0.1(transitive)

• - Removedp-limit@2.3.0(transitive)

• - Removedp-locate@4.1.0(transitive)

• - Removedp-try@2.2.0(transitive)

• - Removedparseurl@1.3.3(transitive)

• - Removedpath-exists@4.0.0(transitive)

• - Removedpath-to-regexp@0.1.12(transitive)

• - Removedproxy-addr@2.0.7(transitive)

• - Removedqs@6.13.0(transitive)

• - Removedrange-parser@1.2.1(transitive)

• - Removedraw-body@2.5.2(transitive)

• - Removedrequire-directory@2.1.1(transitive)

• - Removedrequire-main-filename@2.0.0(transitive)

• - Removedrestore-cursor@2.0.0(transitive)

• - Removedsafe-buffer@5.1.25.2.1(transitive)

• - Removedsafer-buffer@2.1.2(transitive)

• - Removedsend@0.19.0(transitive)

• - Removedserve-static@1.16.2(transitive)

• - Removedset-blocking@2.0.0(transitive)

• - Removedsetprototypeof@1.2.0(transitive)

• - Removedside-channel@1.1.0(transitive)

• - Removedside-channel-list@1.0.0(transitive)

• - Removedside-channel-map@1.0.1(transitive)

• - Removedside-channel-weakmap@1.0.2(transitive)

• - Removedsignal-exit@3.0.7(transitive)

• - Removedsmartwrap@1.2.5(transitive)

• - Removedstatuses@2.0.1(transitive)

• - Removedstream-transform@2.1.3(transitive)

• - Removedstring-width@2.1.14.2.3(transitive)

• - Removedstrip-ansi@4.0.06.0.1(transitive)

• - Removedsupports-color@7.2.0(transitive)

• - Removedtoidentifier@1.0.1(transitive)

• - Removedtty-table@2.8.13(transitive)

• - Removedtype-is@1.6.18(transitive)

• - Removedultron@1.1.1(transitive)

• - Removedunpipe@1.0.0(transitive)

• - Removedutils-merge@1.0.1(transitive)

• - Removedvary@1.1.2(transitive)

• - Removedwcwidth@1.0.1(transitive)

• - Removedwhich-module@2.0.1(transitive)

• - Removedwrap-ansi@3.0.16.2.0(transitive)

• - Removedws@3.3.3(transitive)

• - Removedy18n@4.0.3(transitive)

• - Removedyargs@15.4.1(transitive)

• - Removedyargs-parser@18.1.3(transitive)