mohism - npm Package Compare versions
New alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Fixed alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Improved metrics
- Total package byte prevSize
4146
1952.48%- Number of package files
8
700%- Lines of code
145
Infinity%- Number of medium supply chain risk alerts
0
-100%Worsened metrics
- Dependency count
5
Infinity%- Dev dependency count
3
Infinity%- Number of low supply chain risk alerts
2
100%Dependency changes
+ Added
colors@^1.3.3+ Added
readline-sync@^1.4.10+ Added
shelljs@^0.8.3+ Added
xiaolan-ast@^1.3.72+ Added
yargs@^14.0.0+ Added
@babel/code-frame@7.29.7(transitive)+ Added
@babel/helper-validator-identifier@7.29.7(transitive)+ Added
@mohism/utils@1.2.0(transitive)+ Added
@types/bson@4.0.5(transitive)+ Added
@types/mongodb@3.6.20(transitive)+ Added
@types/node@26.6.2(transitive)+ Added
acorn@6.4.2(transitive)+ Added
acorn-jsx@5.3.2(transitive)+ Added
ajv@6.15.0(transitive)+ Added
ansi-escapes@3.2.0(transitive)+ Added
ansi-regex@3.0.14.1.1(transitive)+ Added
ansi-styles@3.2.1(transitive)+ Added
argparse@1.0.10(transitive)+ Added
asn1@0.2.6(transitive)+ Added
assert-plus@1.0.0(transitive)+ Added
astral-regex@1.0.0(transitive)+ Added
async@2.6.4(transitive)+ Added
asynckit@0.4.0(transitive)+ Added
aws-sign2@0.7.0(transitive)+ Added
aws4@1.13.2(transitive)+ Added
balanced-match@1.0.2(transitive)+ Added
bcrypt-pbkdf@1.0.2(transitive)+ Added
bignumber.js@9.0.0(transitive)+ Added
bl@2.2.1(transitive)+ Added
bluebird@3.5.1(transitive)+ Added
brace-expansion@1.1.21(transitive)+ Added
bson@1.1.6(transitive)+ Added
callsites@3.1.0(transitive)+ Added
camelcase@5.3.1(transitive)+ Added
caseless@0.12.0(transitive)+ Added
chalk@2.4.2(transitive)+ Added
chardet@0.7.0(transitive)+ Added
cli-cursor@2.1.0(transitive)+ Added
cli-width@2.2.1(transitive)+ Added
cliui@5.0.0(transitive)+ Added
color-convert@1.9.3(transitive)+ Added
color-name@1.1.3(transitive)+ Added
colors@1.4.0(transitive)+ Added
combined-stream@1.0.8(transitive)+ Added
commander@1.1.1(transitive)+ Added
concat-map@0.0.1(transitive)+ Added
core-util-is@1.0.2(transitive)+ Added
cross-spawn@6.0.6(transitive)+ Added
dashdash@1.14.1(transitive)+ Added
date-format@4.0.14(transitive)+ Added
dayjs@1.11.23(transitive)+ Added
debug@3.1.04.4.3(transitive)+ Added
decamelize@1.2.0(transitive)+ Added
deep-is@0.1.4(transitive)+ Added
delayed-stream@1.0.0(transitive)+ Added
denque@1.5.1(transitive)+ Added
doctrine@3.0.0(transitive)+ Added
dotenvr@0.1.17(transitive)+ Added
easymysql@0.2.7(transitive)+ Added
ecc-jsbn@0.1.2(transitive)+ Added
emoji-regex@7.0.3(transitive)+ Added
es-errors@1.3.0(transitive)+ Added
escape-string-regexp@1.0.5(transitive)+ Added
eslint@5.16.0(transitive)+ Added
eslint-scope@4.0.3(transitive)+ Added
eslint-utils@1.4.3(transitive)+ Added
eslint-visitor-keys@1.3.0(transitive)+ Added
espree@5.0.1(transitive)+ Added
esprima@4.0.1(transitive)+ Added
esquery@1.7.0(transitive)+ Added
esrecurse@4.3.0(transitive)+ Added
estraverse@4.3.05.3.0(transitive)+ Added
esutils@2.0.3(transitive)+ Added
extend@3.0.2(transitive)+ Added
external-editor@3.1.0(transitive)+ Added
extsprintf@1.3.0(transitive)+ Added
fast-deep-equal@3.1.3(transitive)+ Added
fast-json-stable-stringify@2.1.0(transitive)+ Added
fast-levenshtein@2.0.6(transitive)+ Added
figures@2.0.0(transitive)+ Added
file-entry-cache@5.0.1(transitive)+ Added
find-up@3.0.0(transitive)+ Added
flat-cache@2.0.1(transitive)+ Added
flatted@2.0.23.4.4(transitive)+ Added
forever-agent@0.6.1(transitive)+ Added
form-data@2.3.3(transitive)+ Added
fs-extra@8.1.0(transitive)+ Added
fs.realpath@1.0.0(transitive)+ Added
function-bind@1.1.2(transitive)+ Added
functional-red-black-tree@1.0.1(transitive)+ Added
fy-mysql@0.2.13(transitive)+ Added
get-caller-file@2.0.5(transitive)+ Added
getpass@0.1.7(transitive)+ Added
glob@7.2.3(transitive)+ Added
globals@11.12.0(transitive)+ Added
graceful-fs@4.2.11(transitive)+ Added
har-schema@2.0.0(transitive)+ Added
har-validator@5.1.5(transitive)+ Added
has-flag@3.0.0(transitive)+ Added
hasown@2.0.4(transitive)+ Added
http-signature@1.2.0(transitive)+ Added
iconv-lite@0.4.24(transitive)+ Added
ignore@4.0.6(transitive)+ Added
import-fresh@3.3.1(transitive)+ Added
imurmurhash@0.1.4(transitive)+ Added
inflight@1.0.6(transitive)+ Added
inherits@2.0.4(transitive)+ Added
inquirer@6.5.2(transitive)+ Added
interpret@1.4.0(transitive)+ Added
is-core-module@2.17.0(transitive)+ Added
is-fullwidth-code-point@2.0.0(transitive)+ Added
is-typedarray@1.0.0(transitive)+ Added
isarray@1.0.0(transitive)+ Added
isexe@2.0.0(transitive)+ Added
isstream@0.1.2(transitive)+ Added
js-tokens@4.0.0(transitive)+ Added
js-yaml@3.15.2(transitive)+ Added
jsbn@0.1.1(transitive)+ Added
json-schema@0.4.0(transitive)+ Added
json-schema-traverse@0.4.1(transitive)+ Added
json-stable-stringify-without-jsonify@1.0.1(transitive)+ Added
json-stringify-safe@5.0.1(transitive)+ Added
jsonfile@4.0.0(transitive)+ Added
jsprim@1.4.2(transitive)+ Added
kareem@2.3.2(transitive)+ Added
keypress@0.1.0(transitive)+ Added
levn@0.3.0(transitive)+ Added
locate-path@3.0.0(transitive)+ Added
lodash@4.18.1(transitive)+ Added
log4js@6.9.1(transitive)+ Added
memory-pager@1.5.0(transitive)+ Added
mime-db@1.52.0(transitive)+ Added
mime-types@2.1.35(transitive)+ Added
mimic-fn@1.2.0(transitive)+ Added
minimatch@3.1.5(transitive)+ Added
minimist@1.2.8(transitive)+ Added
mkdirp@0.5.6(transitive)+ Added
mongodb@3.7.4(transitive)+ Added
mongoose@5.13.23(transitive)+ Added
mongoose-legacy-pluralize@1.0.2(transitive)+ Added
mpath@0.8.4(transitive)+ Added
mquery@3.2.5(transitive)+ Added
ms@2.0.02.1.22.1.3(transitive)+ Added
mute-stream@0.0.7(transitive)+ Added
mysql@2.18.1(transitive)+ Added
natural-compare@1.4.0(transitive)+ Added
nice-try@1.0.5(transitive)+ Added
node-pinyin@0.2.3(transitive)+ Added
oauth-sign@0.9.0(transitive)+ Added
once@1.4.0(transitive)+ Added
onetime@2.0.1(transitive)+ Added
optional-require@1.0.31.1.10(transitive)+ Added
optionator@0.8.3(transitive)+ Added
os-tmpdir@1.0.2(transitive)+ Added
p-limit@2.3.0(transitive)+ Added
p-locate@3.0.0(transitive)+ Added
p-try@2.2.0(transitive)+ Added
parent-module@1.0.1(transitive)+ Added
path-exists@3.0.0(transitive)+ Added
path-is-absolute@1.0.1(transitive)+ Added
path-is-inside@1.0.2(transitive)+ Added
path-key@2.0.1(transitive)+ Added
path-parse@1.0.7(transitive)+ Added
performance-now@2.1.0(transitive)+ Added
picocolors@1.1.1(transitive)+ Added
prelude-ls@1.1.2(transitive)+ Added
process-nextick-args@2.0.1(transitive)+ Added
progress@2.0.3(transitive)+ Added
psl@1.15.0(transitive)+ Added
punycode@2.3.1(transitive)+ Added
qs@6.5.5(transitive)+ Added
readable-stream@2.3.7(transitive)+ Added
readline-sync@1.4.10(transitive)+ Added
rechoir@0.6.2(transitive)+ Added
regexp-clone@1.0.0(transitive)+ Added
regexpp@2.0.1(transitive)+ Added
request@2.88.2(transitive)+ Added
request-agent@1.1.0(transitive)+ Added
require-at@1.0.6(transitive)+ Added
require-directory@2.1.1(transitive)+ Added
require-main-filename@2.0.0(transitive)+ Added
resolve@1.22.12(transitive)+ Added
resolve-from@4.0.0(transitive)+ Added
restore-cursor@2.0.0(transitive)+ Added
rfdc@1.4.1(transitive)+ Added
right-pad@1.1.1(transitive)+ Added
rimraf@2.6.3(transitive)+ Added
run-async@2.4.1(transitive)+ Added
rxjs@6.6.7(transitive)+ Added
safe-buffer@5.1.25.2.1(transitive)+ Added
safequeue@0.0.2(transitive)+ Added
safer-buffer@2.1.2(transitive)+ Added
saslprep@1.0.3(transitive)+ Added
semver@5.7.2(transitive)+ Added
set-blocking@2.0.0(transitive)+ Added
shebang-command@1.2.0(transitive)+ Added
shebang-regex@1.0.0(transitive)+ Added
shelljs@0.8.5(transitive)+ Added
sift@13.5.2(transitive)+ Added
signal-exit@3.0.7(transitive)+ Added
slice-ansi@2.1.0(transitive)+ Added
sliced@1.0.1(transitive)+ Added
sparse-bitfield@3.0.3(transitive)+ Added
sprintf-js@1.0.3(transitive)+ Added
sqlstring@2.3.1(transitive)+ Added
sshpk@1.18.0(transitive)+ Added
streamroller@3.1.5(transitive)+ Added
string-width@2.1.13.1.0(transitive)+ Added
string_decoder@1.1.1(transitive)+ Added
strip-ansi@4.0.05.2.0(transitive)+ Added
strip-json-comments@2.0.1(transitive)+ Added
supports-color@5.5.0(transitive)+ Added
supports-preserve-symlinks-flag@1.0.0(transitive)+ Added
table@5.4.6(transitive)+ Added
text-table@0.2.0(transitive)+ Added
through@2.3.8(transitive)+ Added
tmp@0.0.33(transitive)+ Added
tough-cookie@2.5.0(transitive)+ Added
tslib@1.14.1(transitive)+ Added
tunnel-agent@0.6.0(transitive)+ Added
tweetnacl@0.14.5(transitive)+ Added
type-check@0.3.2(transitive)+ Added
undici-types@8.9.0(transitive)+ Added
universalify@0.1.2(transitive)+ Added
uri-js@4.4.1(transitive)+ Added
util-deprecate@1.0.2(transitive)+ Added
uuid@3.4.0(transitive)+ Added
verror@1.10.0(transitive)+ Added
which@1.3.1(transitive)+ Added
which-module@2.0.1(transitive)+ Added
word-wrap@1.2.5(transitive)+ Added
wrap-ansi@5.1.0(transitive)+ Added
wrappy@1.0.2(transitive)+ Added
write@1.0.3(transitive)+ Added
xiaolan@1.7.0(transitive)+ Added
xiaolan-ast@1.3.72(transitive)+ Added
xiaolan-db@1.2.18(transitive)+ Added
xiaolan-router@1.0.4(transitive)+ Added
y18n@4.0.3(transitive)+ Added
yargs@14.2.3(transitive)+ Added
yargs-parser@15.0.3(transitive)