Comparing version 2.14.822 to 2.14.1024
{ | ||
"name": "fswin", | ||
"version": "2.14.822", | ||
"version": "2.14.1024", | ||
"description": "nodejs fs extensions for windows", | ||
"main": "fswin.node", | ||
"main": "index.js", | ||
"engines": { | ||
"node": ">= 0.10" | ||
"node": ">= 0.8" | ||
}, | ||
"scripts": { | ||
"test": "echo \"Error: no test specified\" && exit 1", | ||
"install": "node-gyp rebuild && move build\\Release\\fswin.node . && node-gyp clean" | ||
}, | ||
"repository": { | ||
@@ -27,5 +23,3 @@ "type": "git", | ||
"license": "BSD", | ||
"gypfile": true, | ||
"readmeFilename": "readme.md", | ||
"gitHead": "1bf071049473f20830f7b113655b375d7f52ab65" | ||
"readmeFilename": "readme.md" | ||
} |
Trivial Package
Supply chain riskPackages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Found 1 instance in 1 package
Native code
Supply chain riskContains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.
Found 1 instance in 1 package
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
Found 1 instance in 1 package
633414
6
1
1
7
1