cordova-firefoxos - npm Package Compare versions

Comparing version 3.6.0 to 3.6.1

package.json

 {
     "name": "cordova-firefoxos",
-    "version": "3.6.0",
+    "version": "3.6.1",
     "description": "cordova-firefoxos release",
@@ -19,2 +19,6 @@ "main": "bin/create",
     },
+    "bundledDependencies": [
+        "shelljs",
+        "adm-zip"    
+    ],
     "author": "Apache Software Foundation",
@@ -36,2 +40,2 @@ "contributors": [
     "license": "Apache Version 2.0"
-}
+}

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 9 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 2 instances in 1 package

Fixed alerts

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

401092

increased by265.36%

Number of package files

126

increased by350%

Lines of code

8059

increased by417.93%

Worsened metrics

Number of low license alerts

3

increased by50%

Number of low supply chain risk alerts

48

increased by433.33%

Number of medium supply chain risk alerts

6

increased byInfinity%

No dependency changes