content-tag
Advanced tools
Comparing version 1.2.0 to 1.2.1
{ | ||
"name": "content-tag", | ||
"version": "1.2.0", | ||
"version": "1.2.1", | ||
"description": "A rust program that uses a fork of swc to parse and transform Javascript containing the content-tag proposal", | ||
"repository": { | ||
"type": "git", | ||
"url": "git@github.com:embroider-build/content-tag.git" | ||
"url": "git+ssh://git@github.com/embroider-build/content-tag.git" | ||
}, | ||
@@ -39,3 +39,3 @@ "license": "MIT", | ||
"lint:package": "publint", | ||
"lint:published-types": "attw --pack --ignore-rules cjs-resolves-to-esm", | ||
"lint:published-types": "attw --pack --ignore-rules cjs-resolves-to-esm --ignore-rules false-esm", | ||
"start": "vite", | ||
@@ -42,0 +42,0 @@ "test": "npm run ci:node" |
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
2614673
14
978
2
3