dotenvi - npm Package Compare versions

Comparing version 0.9.0 to 0.9.1

dist/resolvers.js

@@ -12,3 +12,3 @@ "use strict";
 const AWS = require("aws-sdk");
-const Credstash = require('nodecredstash');
+const Credstash = require('aws-credstash');
 const bluebird_1 = require("bluebird");
@@ -15,0 +15,0 @@ const utils_1 = require("./utils");

package.json

 {
   "name": "dotenvi",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "author": "Ben Ross",
@@ -41,6 +41,6 @@ "license": "MIT",
     "argparse": "^1.0.10",
-    "aws-sdk": "^2.224.1",
+    "aws-credstash": "^3.0.0",
+    "aws-sdk": "^2.567.0",
     "bluebird": "^3.5.1",
-    "js-yaml": "^3.11.0",
-    "nodecredstash": "^2.0.2"
+    "js-yaml": "^3.11.0"
   },
@@ -47,0 +47,0 @@ "devDependencies": {

src/resolvers.ts

 import * as AWS from 'aws-sdk';
 import { DescribeStacksOutput } from 'aws-sdk/clients/cloudformation';
 
-const Credstash = require('nodecredstash');
+const Credstash = require('aws-credstash');
 
@@ -6,0 +6,0 @@ import { promisify } from 'bluebird';

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Worsened metrics

Number of low supply chain risk alerts

21

increased by61.54%

Dependency changes

• + Addedaws-credstash@^3.0.0

• + Addedaws-credstash@3.0.1(transitive)

• + Addedaws-sdk@2.1606.0(transitive)

• + Addeddebug@4.3.4(transitive)

• + Addedms@2.1.2(transitive)

• - Removednodecredstash@^2.0.2

• - Removedaws-sdk@2.1608.0(transitive)

• - Removeddebug@3.2.7(transitive)

• - Removedms@2.1.3(transitive)

• - Removednodecredstash@2.0.2(transitive)

• Updatedaws-sdk@^2.567.0