nested-lib - npm Package Compare versions
New alerts
Known malware
Supply chain riskThis package version is identified as malware. It has been flagged either by Socket's AI scanner and confirmed by our threat research team, or is listed as malicious in security databases and other sources.
Found 2 instances
Install scripts
Supply chain riskInstall scripts are run when the package is installed or built. Malicious packages often use scripts that run automatically to execute payloads or fetch additional code.
Network access
Supply chain riskThis module accesses the network.
Found 2 instances
Unpublished package
Supply chain riskPackage version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Unpublished package
Supply chain riskPackage version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Improved metrics
- Total package byte prevSize
2843
1665.84%- Number of package files
4
100%- Lines of code
50
Infinity%- Number of low quality alerts
2
-33.33%- Number of lines in readme file
12
500%Worsened metrics
- Number of critical supply chain risk alerts
2
Infinity%- Number of high supply chain risk alerts
1
Infinity%- Number of low supply chain risk alerts
2
100%- Number of medium supply chain risk alerts
3
50%