okforest - npm Package Compare versions
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Unidentified License
LicenseSomething that seems like a license was found, but its contents could not be matched with a known license.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Deprecated
MaintenanceThe maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
No contributors or author data
MaintenancePackage does not specify a list of contributors or an author in package.json.
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
No License Found
LicenseLicense information could not be found.
No repository
Supply chain riskPackage does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
No website
QualityPackage does not have a website.
Improved metrics
- Total package byte prevSize
31477
9438.48%- Number of package files
14
600%- Lines of code
350
Infinity%- Number of low maintenance alerts
1
-50%- Number of medium maintenance alerts
0
-100%- Number of low quality alerts
1
-66.67%- Number of lines in readme file
25
525%- Is type module
Yes
NaNWorsened metrics
- Dependency count
2
Infinity%- Dev dependency count
5
Infinity%- License quality
80
-20%- Number of low supply chain risk alerts
4
300%- Number of medium supply chain risk alerts
2
100%Dependency changes
+ Added
@okforest/okf@0.1.0+ Added
@okforest/validate@0.1.0+ Added
@okforest/okf@0.1.0(transitive)+ Added
@okforest/validate@0.1.0(transitive)+ Added
@types/debug@4.1.13(transitive)+ Added
@types/mdast@4.0.4(transitive)+ Added
@types/ms@2.1.0(transitive)+ Added
@types/unist@3.0.3(transitive)+ Added
character-entities@2.0.2(transitive)+ Added
debug@4.4.3(transitive)+ Added
decode-named-character-reference@1.3.0(transitive)+ Added
dequal@2.0.3(transitive)+ Added
devlop@1.1.0(transitive)+ Added
longest-streak@3.1.0(transitive)+ Added
mdast-util-from-markdown@2.1.0(transitive)+ Added
mdast-util-gfm-footnote@2.1.0(transitive)+ Added
mdast-util-phrasing@4.1.0(transitive)+ Added
mdast-util-to-markdown@2.2.0(transitive)+ Added
mdast-util-to-string@4.0.0(transitive)+ Added
micromark@4.0.3(transitive)+ Added
micromark-core-commonmark@2.0.4(transitive)+ Added
micromark-extension-gfm-footnote@2.1.0(transitive)+ Added
micromark-factory-destination@2.0.1(transitive)+ Added
micromark-factory-label@2.0.1(transitive)+ Added
micromark-factory-space@2.1.0(transitive)+ Added
micromark-factory-title@2.0.1(transitive)+ Added
micromark-factory-whitespace@2.0.1(transitive)+ Added
micromark-util-character@2.1.1(transitive)+ Added
micromark-util-chunked@2.0.1(transitive)+ Added
micromark-util-classify-character@2.0.1(transitive)+ Added
micromark-util-combine-extensions@2.0.1(transitive)+ Added
micromark-util-decode-numeric-character-reference@2.0.2(transitive)+ Added
micromark-util-decode-string@2.0.1(transitive)+ Added
micromark-util-edit-map@1.0.0(transitive)+ Added
micromark-util-encode@2.0.1(transitive)+ Added
micromark-util-html-tag-name@2.0.1(transitive)+ Added
micromark-util-normalize-identifier@2.0.1(transitive)+ Added
micromark-util-resolve-all@2.0.1(transitive)+ Added
micromark-util-sanitize-uri@2.0.1(transitive)+ Added
micromark-util-subtokenize@2.1.0(transitive)+ Added
micromark-util-symbol@2.0.1(transitive)+ Added
micromark-util-types@2.0.3(transitive)+ Added
ms@2.1.3(transitive)+ Added
unist-util-is@6.0.1(transitive)+ Added
unist-util-stringify-position@4.0.0(transitive)+ Added
unist-util-visit@5.1.0(transitive)+ Added
unist-util-visit-parents@6.0.2(transitive)+ Added
yaml@2.9.1(transitive)+ Added
zwitch@2.0.4(transitive)