medusa-telemetry
medusa-telemetry - npm Package Compare versions
Comparing version 0.0.3 to 0.0.4-next.28
New alerts
Missing package tarball
QualityThis package is missing its tarball. It could be removed from the npm registry or there may have been an error when publishing.
Found 1 instance in 1 package
Fixed alerts
Install scripts
Supply chain riskInstall scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.
Found 1 instance in 1 package
No README
QualityPackage does not have a README. This may indicate a failed publish or a low quality package.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 8 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
No website
QualityPackage does not have a website.
Found 1 instance in 1 package
Improved metrics
- Dependency count
- decreased by-100%
0
- Dev dependency count
- decreased by-100%
0
- Number of low maintenance alerts
- decreased by-100%
0
- Number of low quality alerts
- decreased by-100%
0
- Number of medium quality alerts
- decreased by-100%
0
- Number of high supply chain risk alerts
- decreased by-100%
0
- Number of low supply chain risk alerts
- decreased by-100%
0
- Number of medium supply chain risk alerts
- decreased by-100%
0
Worsened metrics
- Total package byte prevSize
- decreased by-100%
0
- Number of package files
- decreased by-100%
0
- License quality
- decreased by-100%
0
- Lines of code
- decreased by-100%
0
- Number of critical quality alerts
- increased byInfinity%
1
Dependency changes
- Removedaxios@^0.21.1
- Removedaxios-retry@^3.1.9
- Removedboxen@^5.0.1
- Removedci-info@^3.2.0
- Removedconfigstore@5.0.1
- Removedis-docker@^2.2.1
- Removedremove-trailing-slash@^0.1.1
- Removeduuid@^8.3.2
- Removed@babel/runtime@7.26.0(transitive)
- Removedansi-align@3.0.1(transitive)
- Removedansi-regex@5.0.1(transitive)
- Removedansi-styles@4.3.0(transitive)
- Removedaxios@0.21.4(transitive)
- Removedaxios-retry@3.9.1(transitive)
- Removedboxen@5.1.2(transitive)
- Removedcamelcase@6.3.0(transitive)
- Removedchalk@4.1.2(transitive)
- Removedci-info@3.9.0(transitive)
- Removedcli-boxes@2.2.1(transitive)
- Removedcolor-convert@2.0.1(transitive)
- Removedcolor-name@1.1.4(transitive)
- Removedconfigstore@5.0.1(transitive)
- Removedcrypto-random-string@2.0.0(transitive)
- Removeddot-prop@5.3.0(transitive)
- Removedemoji-regex@8.0.0(transitive)
- Removedfollow-redirects@1.15.9(transitive)
- Removedgraceful-fs@4.2.11(transitive)
- Removedhas-flag@4.0.0(transitive)
- Removedimurmurhash@0.1.4(transitive)
- Removedis-docker@2.2.1(transitive)
- Removedis-fullwidth-code-point@3.0.0(transitive)
- Removedis-obj@2.0.0(transitive)
- Removedis-retry-allowed@2.2.0(transitive)
- Removedis-typedarray@1.0.0(transitive)
- Removedmake-dir@3.1.0(transitive)
- Removedregenerator-runtime@0.14.1(transitive)
- Removedremove-trailing-slash@0.1.1(transitive)
- Removedsemver@6.3.1(transitive)
- Removedsignal-exit@3.0.7(transitive)
- Removedstring-width@4.2.3(transitive)
- Removedstrip-ansi@6.0.1(transitive)
- Removedsupports-color@7.2.0(transitive)
- Removedtype-fest@0.20.2(transitive)
- Removedtypedarray-to-buffer@3.1.5(transitive)
- Removedunique-string@2.0.0(transitive)
- Removeduuid@8.3.2(transitive)
- Removedwidest-line@3.1.0(transitive)
- Removedwrap-ansi@7.0.0(transitive)
- Removedwrite-file-atomic@3.0.3(transitive)
- Removedxdg-basedir@4.0.0(transitive)