mern-x - npm Package Compare versions

Comparing version 1.0.21 to 1.0.22

package.json

 {
   "name": "mern-x",
-  "version": "1.0.21",
+  "version": "1.0.22",
   "description": "MERN-X is a comprehensive full-stack framework designed to streamline the development of web applications using the popular MERN stack: MongoDB, Express.js, React, and Node.js. Built with simplicity and scalability in mind, MERN.js empowers developers to create robust and efficient applications from end to end.",
@@ -12,3 +12,2 @@ "scripts": {
   "dependencies": {
-    "commander": "^12.0.0",
     "download-git-repo": "^3.0.2"
@@ -15,0 +14,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dependency count

1

decreased by-50%

Number of low supply chain risk alerts

1

decreased by-50%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

8400

decreased by-13.85%

Number of package files

10

decreased by-9.09%

Lines of code

22

decreased by-60%

Dependency changes

• - Removedcommander@^12.0.0

• - Removedcommander@12.1.0(transitive)