mendel-deps
Advanced tools
Comparing version 3.0.0-beta.1 to 3.0.0-beta.2
{ | ||
"name": "mendel-deps", | ||
"version": "3.0.0-beta.1", | ||
"description": "Depedency finder based on AST and with fs acess caching", | ||
"version": "3.0.0-beta.2", | ||
"description": "Depedency detector based on AST. Supports custom cache and custom resolver.", | ||
"main": "src/deps.js", | ||
@@ -23,4 +23,7 @@ "scripts": { | ||
"tap": "^7.1.2", | ||
"mendel-resolver": "3.0.0-beta.1" | ||
} | ||
"mendel-resolver": "3.0.0-beta.2" | ||
}, | ||
"files": [ | ||
"src/*" | ||
] | ||
} |
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
0
4588
2
110
1