dea-agents - npm Package Compare versions
New alerts
Network access
Supply chain riskThis module accesses the network.
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Unpublished package
Supply chain riskPackage version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 2 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Unpublished package
Supply chain riskPackage version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
No License Found
LicenseLicense information could not be found.
No repository
Supply chain riskPackage does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
No website
QualityPackage does not have a website.
Improved metrics
- Total package byte prevSize
653691
196794.88%- Number of package files
36
1700%- Number of low license alerts
0
-100%- Lines of code
4590
Infinity%- Number of low maintenance alerts
1
-50%- Number of low quality alerts
1
-66.67%- Number of lines in readme file
232
5700%- Is type module
Yes
NaNWorsened metrics
- Dependency count
5
Infinity%- Dev dependency count
6
Infinity%- Number of low supply chain risk alerts
27
2600%- Number of medium supply chain risk alerts
3
50%Dependency changes
+ Added
commander@^15.0.0+ Added
execa@^10.1.1+ Added
picocolors@^1.1.1+ Added
zod@^4.6.7+ Added
@hono/node-server@2.1.5(transitive)+ Added
@modelcontextprotocol/sdk@1.32.2(transitive)+ Added
@sec-ant/readable-stream@0.4.1(transitive)+ Added
@sindresorhus/merge-streams@4.0.0(transitive)+ Added
accepts@2.0.0(transitive)+ Added
ajv@8.20.0(transitive)+ Added
ajv-formats@3.0.1(transitive)+ Added
async-function@1.0.0(transitive)+ Added
async-generator-function@1.0.0(transitive)+ Added
body-parser@2.4.0(transitive)+ Added
bytes@3.1.2(transitive)+ Added
call-bind-apply-helpers@1.0.2(transitive)+ Added
call-bound@1.0.4(transitive)+ Added
commander@15.0.0(transitive)+ Added
content-disposition@2.0.1(transitive)+ Added
content-type@1.0.52.1.0(transitive)+ Added
cookie@0.7.2(transitive)+ Added
cookie-signature@1.2.2(transitive)+ Added
cors@2.8.6(transitive)+ Added
cross-spawn@7.0.6(transitive)+ Added
debug@4.4.3(transitive)+ Added
depd@2.0.0(transitive)+ Added
dunder-proto@1.0.1(transitive)+ Added
ee-first@1.1.1(transitive)+ Added
encodeurl@2.0.1(transitive)+ Added
es-define-property@1.0.1(transitive)+ Added
es-errors@1.3.0(transitive)+ Added
es-object-atoms@1.1.2(transitive)+ Added
escape-html@1.0.3(transitive)+ Added
etag@1.8.1(transitive)+ Added
eventsource@3.0.7(transitive)+ Added
eventsource-parser@3.1.1(transitive)+ Added
execa@10.2.1(transitive)+ Added
express@5.3.0(transitive)+ Added
express-rate-limit@8.7.2(transitive)+ Added
fast-deep-equal@3.1.3(transitive)+ Added
fast-uri@3.1.9(transitive)+ Added
figures@6.1.0(transitive)+ Added
finalhandler@2.1.1(transitive)+ Added
forwarded@0.2.0(transitive)+ Added
fresh@2.0.0(transitive)+ Added
function-bind@1.1.2(transitive)+ Added
generator-function@2.0.1(transitive)+ Added
get-intrinsic@1.3.1(transitive)+ Added
get-proto@1.0.1(transitive)+ Added
get-stream@9.0.1(transitive)+ Added
gopd@1.2.0(transitive)+ Added
has-symbols@1.1.0(transitive)+ Added
hasown@2.0.4(transitive)+ Added
hono@4.13.16(transitive)+ Added
http-errors@2.0.1(transitive)+ Added
human-signals@8.0.1(transitive)+ Added
iconv-lite@0.7.3(transitive)+ Added
inherits@2.0.4(transitive)+ Added
ip-address@10.7.5(transitive)+ Added
ipaddr.js@1.9.1(transitive)+ Added
is-plain-obj@4.1.0(transitive)+ Added
is-promise@4.0.0(transitive)+ Added
is-stream@4.0.1(transitive)+ Added
is-unicode-supported@2.1.0(transitive)+ Added
isexe@2.0.0(transitive)+ Added
jose@6.2.14(transitive)+ Added
json-schema-traverse@1.0.0(transitive)+ Added
json-schema-typed@8.0.2(transitive)+ Added
math-intrinsics@1.1.0(transitive)+ Added
media-typer@1.1.1(transitive)+ Added
merge-descriptors@2.0.0(transitive)+ Added
mime-db@1.54.0(transitive)+ Added
mime-types@3.0.2(transitive)+ Added
ms@2.1.3(transitive)+ Added
negotiator@1.1.0(transitive)+ Added
npm-run-path@6.0.0(transitive)+ Added
object-assign@4.1.1(transitive)+ Added
object-inspect@1.13.4(transitive)+ Added
on-finished@2.4.2(transitive)+ Added
once@1.4.0(transitive)+ Added
parse-ms@4.0.0(transitive)+ Added
parseurl@1.3.3(transitive)+ Added
path-key@3.1.14.0.0(transitive)+ Added
path-to-regexp@8.4.2(transitive)+ Added
picocolors@1.1.1(transitive)+ Added
pkce-challenge@5.0.1(transitive)+ Added
pretty-ms@9.3.1(transitive)+ Added
proxy-addr@2.0.8(transitive)+ Added
qs@6.17.1(transitive)+ Added
range-parser@1.3.0(transitive)+ Added
raw-body@3.0.2(transitive)+ Added
require-from-string@2.0.2(transitive)+ Added
router@2.2.0(transitive)+ Added
safer-buffer@2.1.2(transitive)+ Added
send@1.2.1(transitive)+ Added
serve-static@2.2.1(transitive)+ Added
setprototypeof@1.2.0(transitive)+ Added
shebang-command@2.0.0(transitive)+ Added
shebang-regex@3.0.0(transitive)+ Added
side-channel@1.1.1(transitive)+ Added
side-channel-list@1.0.1(transitive)+ Added
side-channel-map@1.0.1(transitive)+ Added
side-channel-weakmap@1.0.2(transitive)+ Added
signal-exit@4.1.0(transitive)+ Added
statuses@2.0.2(transitive)+ Added
strip-final-newline@4.0.0(transitive)+ Added
toidentifier@1.0.1(transitive)+ Added
type-is@2.1.0(transitive)+ Added
unicorn-magic@0.3.0(transitive)+ Added
unpipe@1.0.0(transitive)+ Added
vary@1.1.2(transitive)+ Added
which@2.0.2(transitive)+ Added
which-command@0.1.0(transitive)+ Added
wrappy@1.0.2(transitive)+ Added
yoctocolors@2.2.0(transitive)+ Added
zod@4.6.7(transitive)+ Added
zod-to-json-schema@3.25.2(transitive)