neonctl - npm Package Compare versions

Comparing version 1.27.5 to 1.27.6

auth.js

@@ -68,2 +68,12 @@ import { custom, generators, Issuer } from 'openid-client';
             }
+            // process the CORS preflight OPTIONS request
+            if (request.method === 'OPTIONS') {
+                response.writeHead(200, {
+                    'Access-Control-Allow-Origin': '*',
+                    'Access-Control-Allow-Methods': 'GET, POST',
+                    'Access-Control-Allow-Headers': 'Content-Type',
+                });
+                response.end();
+                return;
+            }
             log.debug(`Callback received: ${request.url}`);
@@ -70,0 +80,0 @@ const params = neonOAuthClient.callbackParams(request);

package.json

@@ -8,3 +8,3 @@ {
   "type": "module",
-  "version": "1.27.5",
+  "version": "1.27.6",
   "description": "CLI tool for NeonDB Cloud management",
@@ -11,0 +11,0 @@ "main": "index.js",

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 7 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 7 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

134896

0.32%

Lines of code

3448

0.29%

No dependency changes