eureca.io - npm Package Compare versions
New alerts
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Improved metrics
- Total package byte prevSize
690115
35.81%- Dependency count
1
-75%- Number of package files
69
64.29%- Lines of code
19068
34.37%- Number of lines in readme file
53
32.5%Worsened metrics
- Number of low supply chain risk alerts
8
60%- Number of medium supply chain risk alerts
14
16.67%Dependency changes
+ Added
primus@>= 2.1.0+ Added
access-control@1.0.1(transitive)+ Added
asyncemit@3.0.1(transitive)+ Added
color@3.2.1(transitive)+ Added
color-convert@1.9.3(transitive)+ Added
color-name@1.1.3(transitive)+ Added
color-string@1.9.1(transitive)+ Added
colornames@1.1.1(transitive)+ Added
colorspace@1.1.4(transitive)+ Added
connected@0.0.2(transitive)+ Added
create-server@1.0.2(transitive)+ Added
diagnostics@1.1.12.0.2(transitive)+ Added
emits@3.0.0(transitive)+ Added
enabled@1.0.22.0.0(transitive)+ Added
env-variable@0.0.6(transitive)+ Added
eventemitter3@4.0.75.0.4(transitive)+ Added
extendible@0.1.1(transitive)+ Added
forwarded-for@1.1.0(transitive)+ Added
fusing@1.0.0(transitive)+ Added
is-arrayish@0.3.4(transitive)+ Added
kuler@1.0.12.0.0(transitive)+ Added
millisecond@0.1.2(transitive)+ Added
nanoid@3.3.19(transitive)+ Added
predefine@0.1.3(transitive)+ Added
primus@8.0.9(transitive)+ Added
setheader@1.0.2(transitive)+ Added
simple-swizzle@0.2.4(transitive)+ Added
storage-engine@3.0.7(transitive)+ Added
text-hex@1.0.0(transitive)+ Added
ultron@1.1.1(transitive)- Removed
engine.io@>= 1.0.0- Removed
engine.io-client@>= 1.0.0- Removed
sockjs@>= 0.3.0- Removed
sockjs-client@>= 0.1.3- Removed
@socket.io/component-emitter@3.1.2(transitive)- Removed
@types/cors@2.8.19(transitive)- Removed
@types/node@26.6.2(transitive)- Removed
@types/ws@8.18.1(transitive)- Removed
accepts@1.3.8(transitive)- Removed
cookie@0.7.2(transitive)- Removed
cors@2.8.6(transitive)- Removed
debug@3.2.74.4.3(transitive)- Removed
engine.io@6.6.10(transitive)- Removed
engine.io-client@6.6.6(transitive)- Removed
engine.io-parser@5.2.3(transitive)- Removed
eventsource@2.0.2(transitive)- Removed
faye-websocket@0.11.4(transitive)- Removed
http-parser-js@0.5.10(transitive)- Removed
inherits@2.0.4(transitive)- Removed
mime-db@1.52.0(transitive)- Removed
mime-types@2.1.35(transitive)- Removed
ms@2.1.3(transitive)- Removed
negotiator@0.6.3(transitive)- Removed
object-assign@4.1.1(transitive)- Removed
querystringify@2.2.0(transitive)- Removed
requires-port@1.0.0(transitive)- Removed
safe-buffer@5.2.1(transitive)- Removed
sockjs@0.3.24(transitive)- Removed
sockjs-client@1.6.1(transitive)- Removed
undici-types@8.9.0(transitive)- Removed
url-parse@1.5.10(transitive)- Removed
uuid@8.3.2(transitive)- Removed
websocket-driver@0.7.5(transitive)- Removed
websocket-extensions@0.1.4(transitive)- Removed
ws@8.21.3(transitive)- Removed
xmlhttprequest-ssl@2.1.2(transitive)