machinepack-machines - npm Package Compare versions

Comparing version 1.0.3 to 1.0.4

machines/list-machines.js

@@ -50,3 +50,7 @@ module.exports = {
         try {
+          // Grab array of machine identities from package.json data
           machineIdentities = jsonData.machinepack.machines;
+
+          // Sort alphabetically for easier reading
+          machineIdentities.sort();
         }
@@ -57,2 +61,3 @@ catch (e) {
 
+
         return exits.success(machineIdentities);
@@ -59,0 +64,0 @@ }

package.json

 {
   "name": "machinepack-machines",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Work with machines and machinepacks.",
@@ -43,5 +43,6 @@ "scripts": {
       "run-machine-interactive",
-      "parse-machinepack-metadata"
+      "parse-machinepack-metadata",
+      "parse-machine-from-js"
     ]
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

62258

increased by12.04%

Number of package files

24

increased by9.09%

Lines of code

1682

increased by11.46%

Worsened metrics

Number of medium supply chain risk alerts

3

increased by200%

No dependency changes