oracle - npm Package Compare versions

Comparing version 0.1.2 to 0.1.3

package.json

 {
-    "name": "oracle",
-    "description": "Oracle database driver",
-    "keywords": ["database", "db", "oracle"],
-    "homepage": "https://github.com/nearinfinity/node-oracle",
-    "version": "0.1.2",
-    "engines": { "node" : ">=0.6.0" },
-    "maintainers": [
-        { "name": "Joe Ferner", "email": "[e-mail]" }
-    ],
-    "bugs" : { "url" : "https://github.com/nearinfinity/node-oracle/issues" },
-    "repositories" : [
-        { "type" : "git", "url" : "https://github.com/nearinfinity/node-oracle" }
-    ],
-    "scripts" : {
-        "install": "node-waf configure build"
-    },
-    "devDependencies" : {
-        "nodeunit" : "~>0.6.4"
+  "name": "oracle",
+  "description": "Oracle database driver",
+  "keywords": ["database", "db", "oracle"],
+  "homepage": "https://github.com/nearinfinity/node-oracle",
+  "version": "0.1.3",
+  "engines": {
+    "node": ">=0.6.0"
+  },
+  "maintainers": [
+    {
+      "name": "Joe Ferner",
+      "email": "[e-mail]"
     }
+  ],
+  "bugs": {
+    "url": "https://github.com/nearinfinity/node-oracle/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git://github.com/nearinfinity/node-oracle.git"
+  },
+  "dependencies": {
+    "mnm": "~0.0.2"
+  },
+  "devDependencies": {
+    "nodeunit": "~>0.6.4"
+  },
+  "scripts": {
+    "test": "nodeunit test",
+    "install": "node mnm.js build"
+  },
+  "main": "./index.js"
 }

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

44007

increased by1.13%

Number of package files

21

increased by5%

Lines of code

207

increased by16.29%

Worsened metrics

Dependency count

1

increased byInfinity%

Number of low supply chain risk alerts

3

increased by50%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedmnm@~0.0.2

• + Addedmnm@0.0.4(transitive)