New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
openai - npm Package Compare versions
New alerts
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
22824998
0.3%- Number of package files
4017
0.45%- Lines of code
331919
0.32%Worsened metrics
- Dependency count
7
16.67%- Number of low supply chain risk alerts
21
5%No dependency changes