dakin - npm Package Compare versions
New alerts
Explicitly Unlicensed Item
LicenseSomething was found which is explicitly marked as unlicensed.
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Misc. License Issues
LicenseA package's licensing information has fine-grained problems.
Network access
Supply chain riskThis module accesses the network.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 2 instances
No contributors or author data
MaintenancePackage does not specify a list of contributors or an author in package.json.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Trivial Package
Supply chain riskPackages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
Improved metrics
- Total package byte prevSize
184372
14017.3%- Number of package files
74
2366.67%- Lines of code
2863
286200%- Number of low quality alerts
2
-33.33%- Number of lines in readme file
229
397.83%Worsened metrics
- Dependency count
4
Infinity%- Dev dependency count
4
Infinity%- Number of high license alerts
1
Infinity%- Number of medium license alerts
1
Infinity%- License quality
0
-100%- Number of low supply chain risk alerts
9
800%- Number of medium supply chain risk alerts
7
600%Dependency changes
+ Added
@inquirer/prompts@^5.5.0+ Added
chalk@^5.3.0+ Added
commander@^12.1.0+ Added
@hono/node-server@2.1.1(transitive)+ Added
@inquirer/checkbox@2.5.0(transitive)+ Added
@inquirer/confirm@3.2.0(transitive)+ Added
@inquirer/core@9.2.1(transitive)+ Added
@inquirer/editor@2.2.0(transitive)+ Added
@inquirer/expand@2.3.0(transitive)+ Added
@inquirer/figures@1.0.15(transitive)+ Added
@inquirer/input@2.3.0(transitive)+ Added
@inquirer/number@1.1.0(transitive)+ Added
@inquirer/password@2.2.0(transitive)+ Added
@inquirer/prompts@5.5.0(transitive)+ Added
@inquirer/rawlist@2.3.0(transitive)+ Added
@inquirer/search@1.1.0(transitive)+ Added
@inquirer/select@2.5.0(transitive)+ Added
@inquirer/type@1.5.52.0.0(transitive)+ Added
@modelcontextprotocol/sdk@1.30.0(transitive)+ Added
@types/mute-stream@0.0.4(transitive)+ Added
@types/node@22.20.1(transitive)+ Added
@types/wrap-ansi@3.0.0(transitive)+ Added
accepts@2.0.0(transitive)+ Added
ajv@8.20.0(transitive)+ Added
ajv-formats@3.0.1(transitive)+ Added
ansi-escapes@4.3.2(transitive)+ Added
ansi-regex@5.0.1(transitive)+ Added
ansi-styles@4.3.0(transitive)+ Added
async-function@1.0.0(transitive)+ Added
async-generator-function@1.0.0(transitive)+ Added
body-parser@2.3.0(transitive)+ Added
bytes@3.1.2(transitive)+ Added
call-bind-apply-helpers@1.0.2(transitive)+ Added
call-bound@1.0.4(transitive)+ Added
chalk@5.6.2(transitive)+ Added
chardet@0.7.0(transitive)+ Added
cli-width@4.1.0(transitive)+ Added
color-convert@2.0.1(transitive)+ Added
color-name@1.1.4(transitive)+ Added
commander@12.1.0(transitive)+ Added
content-disposition@1.1.0(transitive)+ Added
content-type@1.0.52.1.0(transitive)+ Added
cookie@0.7.2(transitive)+ Added
cookie-signature@1.2.2(transitive)+ Added
cors@2.8.6(transitive)+ Added
cross-spawn@7.0.6(transitive)+ Added
debug@4.4.3(transitive)+ Added
depd@2.0.0(transitive)+ Added
dunder-proto@1.0.1(transitive)+ Added
ee-first@1.1.1(transitive)+ Added
emoji-regex@8.0.0(transitive)+ Added
encodeurl@2.0.0(transitive)+ Added
es-define-property@1.0.1(transitive)+ Added
es-errors@1.3.0(transitive)+ Added
es-object-atoms@1.1.2(transitive)+ Added
escape-html@1.0.3(transitive)+ Added
etag@1.8.1(transitive)+ Added
eventsource@3.0.7(transitive)+ Added
eventsource-parser@3.1.1(transitive)+ Added
express@5.2.1(transitive)+ Added
express-rate-limit@8.7.0(transitive)+ Added
external-editor@3.1.0(transitive)+ Added
fast-deep-equal@3.1.3(transitive)+ Added
fast-uri@3.1.7(transitive)+ Added
finalhandler@2.1.1(transitive)+ Added
forwarded@0.2.0(transitive)+ Added
fresh@2.0.0(transitive)+ Added
function-bind@1.1.2(transitive)+ Added
generator-function@2.0.1(transitive)+ Added
get-intrinsic@1.3.1(transitive)+ Added
get-proto@1.0.1(transitive)+ Added
gopd@1.2.0(transitive)+ Added
has-symbols@1.1.0(transitive)+ Added
hasown@2.0.4(transitive)+ Added
hono@4.13.5(transitive)+ Added
http-errors@2.0.1(transitive)+ Added
iconv-lite@0.4.240.7.3(transitive)+ Added
inherits@2.0.4(transitive)+ Added
ip-address@10.7.0(transitive)+ Added
ipaddr.js@1.9.1(transitive)+ Added
is-fullwidth-code-point@3.0.0(transitive)+ Added
is-promise@4.0.0(transitive)+ Added
isexe@2.0.0(transitive)+ Added
jose@6.2.10(transitive)+ Added
json-schema-traverse@1.0.0(transitive)+ Added
json-schema-typed@8.0.2(transitive)+ Added
math-intrinsics@1.1.0(transitive)+ Added
media-typer@1.1.1(transitive)+ Added
merge-descriptors@2.0.0(transitive)+ Added
mime-db@1.54.0(transitive)+ Added
mime-types@3.0.2(transitive)+ Added
ms@2.1.3(transitive)+ Added
mute-stream@1.0.0(transitive)+ Added
negotiator@1.1.0(transitive)+ Added
object-assign@4.1.1(transitive)+ Added
object-inspect@1.13.4(transitive)+ Added
on-finished@2.4.1(transitive)+ Added
once@1.4.0(transitive)+ Added
os-tmpdir@1.0.2(transitive)+ Added
parseurl@1.3.3(transitive)+ Added
path-key@3.1.1(transitive)+ Added
path-to-regexp@8.4.2(transitive)+ Added
pkce-challenge@5.0.1(transitive)+ Added
proxy-addr@2.0.7(transitive)+ Added
qs@6.16.0(transitive)+ Added
range-parser@1.3.0(transitive)+ Added
raw-body@3.0.2(transitive)+ Added
require-from-string@2.0.2(transitive)+ Added
router@2.2.0(transitive)+ Added
safer-buffer@2.1.2(transitive)+ Added
send@1.2.1(transitive)+ Added
serve-static@2.2.1(transitive)+ Added
setprototypeof@1.2.0(transitive)+ Added
shebang-command@2.0.0(transitive)+ Added
shebang-regex@3.0.0(transitive)+ Added
side-channel@1.1.1(transitive)+ Added
side-channel-list@1.0.1(transitive)+ Added
side-channel-map@1.0.1(transitive)+ Added
side-channel-weakmap@1.0.2(transitive)+ Added
signal-exit@4.1.0(transitive)+ Added
statuses@2.0.2(transitive)+ Added
string-width@4.2.3(transitive)+ Added
strip-ansi@6.0.1(transitive)+ Added
tmp@0.0.33(transitive)+ Added
toidentifier@1.0.1(transitive)+ Added
type-fest@0.21.3(transitive)+ Added
type-is@2.1.0(transitive)+ Added
undici-types@6.21.0(transitive)+ Added
unpipe@1.0.0(transitive)+ Added
vary@1.1.2(transitive)+ Added
which@2.0.2(transitive)+ Added
wrap-ansi@6.2.0(transitive)+ Added
wrappy@1.0.2(transitive)+ Added
yoctocolors-cjs@2.1.3(transitive)+ Added
zod@4.5.4(transitive)+ Added
zod-to-json-schema@3.25.2(transitive)