fabric8-analytics-dependency-editor
Advanced tools
Comparing version 0.0.7-development to 0.0.8-development
{ | ||
"name": "fabric8-analytics-dependency-editor", | ||
"version": "0.0.7-development", | ||
"version": "0.0.8-development", | ||
"description": "Dependency editor", | ||
@@ -5,0 +5,0 @@ "main": "bundles/fabric8-analytics-dep-editor.umd.js", |
@@ -21,4 +21,4 @@ import { Injectable, EventEmitter, Output } from '@angular/core'; | ||
this.URLS_HASH = {}; | ||
this.LICENSE_API_BASE = this.checkForTrailingSlashes(this.urlProvider.getLicenseAPIUrl()); | ||
this.RECOMMENDER_API_BASE = this.checkForTrailingSlashes(this.urlProvider.getRecommenderAPIUrl()); | ||
this.LICENSE_API_BASE = this.checkForTrailingSlashes(this.urlProvider.getLicenseAPIUrl() || 'https://license-analysis.api.prod-preview.openshift.io/'); | ||
this.RECOMMENDER_API_BASE = this.checkForTrailingSlashes(this.urlProvider.getRecommenderAPIUrl() || 'https://recommender.api.prod-preview.openshift.io/'); | ||
this.URLS_HASH = { | ||
@@ -25,0 +25,0 @@ 'CVE': this.RECOMMENDER_API_BASE + 'api/v1/depeditor-cve-analyses/', |
Sorry, the diff of this file is not supported yet
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Native code
Supply chain riskContains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 4 instances in 1 package
0
1
341859
126
2965