cypress - npm Package Compare versions

Comparing version 15.6.0 to 15.7.0

mount-utils/mount-utils/package.json

@@ -17,3 +17,3 @@ {
     "@rollup/plugin-commonjs": "^17.1.0",
-    "@rollup/plugin-node-resolve": "^11.1.1",
+    "@rollup/plugin-node-resolve": "^11.2.1",
     "eslint": "^9.31.0",
@@ -20,0 +20,0 @@ "rollup": "3.29.5",

mount-utils/package.json

@@ -17,3 +17,3 @@ {
     "@rollup/plugin-commonjs": "^17.1.0",
-    "@rollup/plugin-node-resolve": "^11.1.1",
+    "@rollup/plugin-node-resolve": "^11.2.1",
     "eslint": "^9.31.0",
@@ -20,0 +20,0 @@ "rollup": "3.29.5",

package.json

 {
   "name": "cypress",
-  "version": "15.6.0",
+  "version": "15.7.0",
   "main": "dist/index.js",
@@ -46,3 +46,2 @@ "scripts": {
     "request-progress": "^3.0.0",
-    "semver": "^7.7.1",
     "supports-color": "^8.1.1",
@@ -131,4 +130,4 @@ "systeminformation": "5.27.7",
     "commitBranch": "develop",
-    "commitSha": "b3a1e6d398e9db1a3a9564b841b126b1a4695ab0",
-    "commitDate": "2025-11-04T19:54:55.000Z",
+    "commitSha": "201e22e4894f3eb3be2ab6dcb89671cb8eb71301",
+    "commitDate": "2025-11-19T18:49:03.000Z",
     "stable": true
@@ -135,0 +134,0 @@ },

react/package.json

@@ -20,3 +20,3 @@ {
     "@cypress/mount-utils": "0.0.0-development",
-    "@types/semver": "7.5.8",
+    "@types/semver": "7.7.1",
     "@vitejs/plugin-react": "4.6.0",
@@ -30,3 +30,3 @@ "axios": "1.8.2",
     "react-router-dom": "6.28.0",
-    "semver": "^7.7.1",
+    "semver": "^7.7.3",
     "typescript": "~5.4.5",
@@ -33,0 +33,0 @@ "vite": "6.3.5",

react/react/package.json

@@ -20,3 +20,3 @@ {
     "@cypress/mount-utils": "0.0.0-development",
-    "@types/semver": "7.5.8",
+    "@types/semver": "7.7.1",
     "@vitejs/plugin-react": "4.6.0",
@@ -30,3 +30,3 @@ "axios": "1.8.2",
     "react-router-dom": "6.28.0",
-    "semver": "^7.7.1",
+    "semver": "^7.7.3",
     "typescript": "~5.4.5",
@@ -33,0 +33,0 @@ "vite": "6.3.5",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 19 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 19 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4435113

0.01%

Dependency count

42

-2.33%

Lines of code

111775

0.04%

Number of low supply chain risk alerts

528

-0.19%

Dependency changes

• - Removed

  semver@^7.7.1

• - Removed

  semver@7.7.4
  (transitive)