dsh-connect
Advanced tools
dsh-connect - npm Package Compare versions
New alerts
Network access
Supply chain riskThis module accesses the network.
Found 2 instances
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 9 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 2 instances
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
Improved metrics
- Total package byte prevSize
974229
79.85%- Number of package files
165
153.85%- Lines of code
11590
82.38%- Number of low quality alerts
1
-50%- Number of lines in readme file
239
17.73%Worsened metrics
- Dependency count
6
20%- Dev dependency count
7
16.67%- Number of low supply chain risk alerts
27
285.71%- Number of medium supply chain risk alerts
6
Infinity%Dependency changes
+ Added
@larksuiteoapi/node-sdk@1.74.0(transitive)+ Added
@protobufjs/aspromise@1.1.2(transitive)+ Added
@protobufjs/base64@1.1.2(transitive)+ Added
@protobufjs/codegen@2.0.5(transitive)+ Added
@protobufjs/eventemitter@1.1.1(transitive)+ Added
@protobufjs/fetch@1.1.1(transitive)+ Added
@protobufjs/float@1.0.2(transitive)+ Added
@protobufjs/path@1.1.2(transitive)+ Added
@protobufjs/pool@1.1.0(transitive)+ Added
@protobufjs/utf8@1.1.2(transitive)+ Added
@types/node@26.6.2(transitive)+ Added
agent-base@6.0.2(transitive)+ Added
async-function@1.0.0(transitive)+ Added
async-generator-function@1.0.0(transitive)+ Added
asynckit@0.4.0(transitive)+ Added
axios@1.20.0(transitive)+ Added
call-bind-apply-helpers@1.0.2(transitive)+ Added
call-bound@1.0.4(transitive)+ Added
combined-stream@1.0.8(transitive)+ Added
debug@4.4.3(transitive)+ Added
delayed-stream@1.0.0(transitive)+ Added
dunder-proto@1.0.1(transitive)+ Added
es-define-property@1.0.1(transitive)+ Added
es-errors@1.3.0(transitive)+ Added
es-object-atoms@1.1.2(transitive)+ Added
es-set-tostringtag@2.1.0(transitive)+ Added
follow-redirects@1.16.0(transitive)+ Added
form-data@4.0.6(transitive)+ Added
function-bind@1.1.2(transitive)+ Added
generator-function@2.0.1(transitive)+ Added
get-intrinsic@1.3.1(transitive)+ Added
get-proto@1.0.1(transitive)+ Added
gopd@1.2.0(transitive)+ Added
has-symbols@1.1.0(transitive)+ Added
has-tostringtag@1.0.2(transitive)+ Added
hasown@2.0.4(transitive)+ Added
https-proxy-agent@5.0.1(transitive)+ Added
lodash.identity@3.0.0(transitive)+ Added
lodash.merge@4.6.2(transitive)+ Added
lodash.pickby@4.6.0(transitive)+ Added
long@5.3.2(transitive)+ Added
math-intrinsics@1.1.0(transitive)+ Added
mime-db@1.52.0(transitive)+ Added
mime-types@2.1.35(transitive)+ Added
ms@2.1.3(transitive)+ Added
object-inspect@1.13.4(transitive)+ Added
protobufjs@7.6.6(transitive)+ Added
proxy-from-env@2.1.0(transitive)+ Added
qs@6.16.0(transitive)+ Added
side-channel@1.1.1(transitive)+ Added
side-channel-list@1.0.1(transitive)+ Added
side-channel-map@1.0.1(transitive)+ Added
side-channel-weakmap@1.0.2(transitive)+ Added
undici-types@8.9.0(transitive)+ Added
ws@8.21.3(transitive)