function-exec-sync - npm Package Compare versions

Comparing version 1.2.26 to 1.2.27

package.json

 {
   "name": "function-exec-sync",
-  "version": "1.2.26",
+  "version": "1.2.27",
   "description": "Run a function in a node process",
@@ -47,4 +47,4 @@ "keywords": [
   "dependencies": {
-    "async-compat": "^1.6.11",
-    "core-js": "^3.42.0",
+    "async-compat": "^1.6.13",
+    "core-js": "^3.43.0",
     "mkdirp-classic": "^0.5.3",
@@ -55,3 +55,3 @@ "os-shim": "^0.1.3",
     "temp-suffix": "^0.1.18",
-    "thread-sleep-compat": "^0.2.26"
+    "thread-sleep-compat": "^0.2.27"
   },
@@ -58,0 +58,0 @@ "devDependencies": {

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No metric changes

Dependency changes

• Updated

  async-compat@^1.6.13

• Updated

  core-js@^3.43.0

• Updated

  thread-sleep-compat@^0.2.27