orcinus - npm Package Compare versions
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 20 instances
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 2 instances
Fixed alerts
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
Improved metrics
- Total package byte prevSize
3737285
12422.32%- Number of package files
59
180.95%- Lines of code
9832
1125.94%- Number of low quality alerts
1
-50%- Number of lines in readme file
148
12.12%Worsened metrics
- Dependency count
31
520%- Dev dependency count
5
Infinity%- Number of low supply chain risk alerts
63
1160%- Number of medium supply chain risk alerts
14
55.56%Dependency changes
+ Added
async@^2.4.1+ Added
bcrypt@^1.0.2+ Added
body-parser@~1.15.1+ Added
bytes@^2.5.0+ Added
compression@^1.6.2+ Added
cookie-parser@~1.4.3+ Added
cors@^2.8.3+ Added
debug@~2.2.0+ Added
docker-parse-image@^3.0.1+ Added
express@^4.15.2+ Added
file-extension@^3.1.2+ Added
http-proxy@^1.16.2+ Added
jade@~1.11.0+ Added
jsonwebtoken@^7.4.1+ Added
jwt-decode@^2.2.0+ Added
md5@^2.2.1+ Added
mongoose@^4.10.5+ Added
morgan@~1.7.0+ Added
orcinusd@^0.3.3+ Added
passport@^0.3.2+ Added
passport-github@^1.1.0+ Added
passport-google-oauth@^1.0.0+ Added
passport-local@^1.0.0+ Added
path@^0.12.7+ Added
serve-favicon@~2.3.0+ Added
urandom@0.0.2+ Added
JSONStream@0.10.0(transitive)+ Added
abbrev@1.1.1(transitive)+ Added
accepts@1.3.8(transitive)+ Added
acorn@1.2.22.7.0(transitive)+ Added
acorn-globals@1.0.9(transitive)+ Added
ajv@6.15.0(transitive)+ Added
align-text@0.1.4(transitive)+ Added
amdefine@1.0.1(transitive)+ Added
ansi-regex@2.1.1(transitive)+ Added
aproba@1.2.0(transitive)+ Added
are-we-there-yet@1.1.7(transitive)+ Added
array-flatten@1.1.1(transitive)+ Added
asap@1.0.0(transitive)+ Added
asn1@0.2.6(transitive)+ Added
assert-plus@1.0.0(transitive)+ Added
async@2.6.02.6.4(transitive)+ Added
async-function@1.0.0(transitive)+ Added
async-generator-function@1.0.0(transitive)+ Added
asynckit@0.4.0(transitive)+ Added
available-typed-arrays@1.0.7(transitive)+ Added
aws-sign2@0.7.0(transitive)+ Added
aws4@1.13.2(transitive)+ Added
base64url@3.0.1(transitive)+ Added
basic-auth@1.0.4(transitive)+ Added
bcrypt@1.0.3(transitive)+ Added
bcrypt-pbkdf@1.0.2(transitive)+ Added
bl@1.2.3(transitive)+ Added
block-stream@0.0.9(transitive)+ Added
bluebird@3.5.0(transitive)+ Added
body-parser@1.15.21.20.9(transitive)+ Added
bson@1.0.9(transitive)+ Added
buffer-alloc@1.2.0(transitive)+ Added
buffer-alloc-unsafe@1.1.0(transitive)+ Added
buffer-equal-constant-time@1.0.1(transitive)+ Added
buffer-fill@1.0.0(transitive)+ Added
buffer-from@1.1.2(transitive)+ Added
buffer-shims@1.0.0(transitive)+ Added
bytes@2.4.02.5.03.1.2(transitive)+ Added
call-bind@1.0.9(transitive)+ Added
call-bind-apply-helpers@1.0.2(transitive)+ Added
call-bound@1.0.4(transitive)+ Added
camelcase@1.2.1(transitive)+ Added
caseless@0.12.0(transitive)+ Added
center-align@0.1.3(transitive)+ Added
character-parser@1.2.1(transitive)+ Added
charenc@0.0.2(transitive)+ Added
chownr@1.1.4(transitive)+ Added
clean-css@3.4.28(transitive)+ Added
cliui@2.1.0(transitive)+ Added
code-point-at@1.1.0(transitive)+ Added
combined-stream@1.0.8(transitive)+ Added
commander@2.6.02.8.1(transitive)+ Added
compressible@2.0.18(transitive)+ Added
compression@1.8.2(transitive)+ Added
concat-stream@1.6.2(transitive)+ Added
console-control-strings@1.1.0(transitive)+ Added
constantinople@3.0.2(transitive)+ Added
content-disposition@0.5.4(transitive)+ Added
content-type@1.0.5(transitive)+ Added
cookie@0.7.2(transitive)+ Added
cookie-parser@1.4.7(transitive)+ Added
cookie-signature@1.0.6(transitive)+ Added
core-util-is@1.0.21.0.3(transitive)+ Added
cors@2.8.6(transitive)+ Added
crypt@0.0.2(transitive)+ Added
css@1.0.8(transitive)+ Added
css-parse@1.0.4(transitive)+ Added
css-stringify@1.0.5(transitive)+ Added
dashdash@1.14.1(transitive)+ Added
debug@2.2.02.6.9(transitive)+ Added
decamelize@1.2.0(transitive)+ Added
deep-extend@0.6.0(transitive)+ Added
define-data-property@1.1.4(transitive)+ Added
delayed-stream@1.0.0(transitive)+ Added
delegates@1.0.0(transitive)+ Added
depd@1.1.22.0.0(transitive)+ Added
destroy@1.2.0(transitive)+ Added
docker-modem@0.3.7(transitive)+ Added
docker-parse-image@3.0.1(transitive)+ Added
dunder-proto@1.0.1(transitive)+ Added
ecc-jsbn@0.1.2(transitive)+ Added
ecdsa-sig-formatter@1.0.11(transitive)+ Added
ee-first@1.1.1(transitive)+ Added
encodeurl@2.0.1(transitive)+ Added
end-of-stream@1.4.5(transitive)+ Added
es-define-property@1.0.1(transitive)+ Added
es-errors@1.3.0(transitive)+ Added
es-object-atoms@1.1.2(transitive)+ Added
es6-promise@3.2.1(transitive)+ Added
escape-html@1.0.3(transitive)+ Added
etag@1.7.01.8.1(transitive)+ Added
eventemitter3@4.0.7(transitive)+ Added
express@4.22.3(transitive)+ Added
extend@3.0.2(transitive)+ Added
extsprintf@1.3.0(transitive)+ Added
fast-deep-equal@3.1.3(transitive)+ Added
fast-json-stable-stringify@2.1.0(transitive)+ Added
file-extension@3.1.2(transitive)+ Added
finalhandler@1.3.2(transitive)+ Added
follow-redirects@1.16.2(transitive)+ Added
for-each@0.3.5(transitive)+ Added
forever-agent@0.6.1(transitive)+ Added
form-data@2.3.3(transitive)+ Added
forwarded@0.2.0(transitive)+ Added
fresh@0.3.00.5.2(transitive)+ Added
fs-constants@1.0.0(transitive)+ Added
fstream@1.0.12(transitive)+ Added
fstream-ignore@1.0.5(transitive)+ Added
function-bind@1.1.2(transitive)+ Added
gauge@2.7.4(transitive)+ Added
generator-function@2.0.1(transitive)+ Added
get-intrinsic@1.3.1(transitive)+ Added
get-proto@1.0.1(transitive)+ Added
getpass@0.1.7(transitive)+ Added
gopd@1.2.0(transitive)+ Added
graceful-fs@4.2.11(transitive)+ Added
graceful-readlink@1.0.1(transitive)+ Added
har-schema@2.0.0(transitive)+ Added
har-validator@5.1.5(transitive)+ Added
has-property-descriptors@1.0.2(transitive)+ Added
has-symbols@1.1.0(transitive)+ Added
has-tostringtag@1.0.2(transitive)+ Added
has-unicode@2.0.1(transitive)+ Added
hasown@2.0.4(transitive)+ Added
hoek@2.16.3(transitive)+ Added
hooks-fixed@2.0.2(transitive)+ Added
http-errors@1.5.12.0.1(transitive)+ Added
http-proxy@1.18.1(transitive)+ Added
http-signature@1.2.0(transitive)+ Added
iconv-lite@0.4.130.4.24(transitive)+ Added
inherits@2.0.3(transitive)+ Added
ini@1.3.8(transitive)+ Added
ipaddr.js@1.9.1(transitive)+ Added
is-buffer@1.1.6(transitive)+ Added
is-callable@1.2.7(transitive)+ Added
is-fullwidth-code-point@1.0.0(transitive)+ Added
is-promise@1.0.12.2.2(transitive)+ Added
is-typed-array@1.1.15(transitive)+ Added
is-typedarray@1.0.0(transitive)+ Added
isarray@0.0.11.0.02.0.5(transitive)+ Added
isemail@1.2.0(transitive)+ Added
isstream@0.1.2(transitive)+ Added
jade@1.11.0(transitive)+ Added
joi@6.10.1(transitive)+ Added
jsbn@0.1.1(transitive)+ Added
json-schema@0.4.0(transitive)+ Added
json-schema-traverse@0.4.1(transitive)+ Added
json-stringify-safe@5.0.1(transitive)+ Added
jsonparse@0.0.5(transitive)+ Added
jsonwebtoken@7.4.3(transitive)+ Added
jsprim@1.4.2(transitive)+ Added
jstransformer@0.0.2(transitive)+ Added
jwa@1.4.2(transitive)+ Added
jws@3.2.3(transitive)+ Added
jwt-decode@2.2.0(transitive)+ Added
kareem@1.5.0(transitive)+ Added
kind-of@3.2.2(transitive)+ Added
lazy-cache@1.0.4(transitive)+ Added
lodash@4.18.1(transitive)+ Added
lodash.get@4.4.2(transitive)+ Added
lodash.once@4.1.1(transitive)+ Added
longest@1.0.1(transitive)+ Added
math-intrinsics@1.1.0(transitive)+ Added
md5@2.3.0(transitive)+ Added
media-typer@0.3.0(transitive)+ Added
merge-descriptors@1.0.3(transitive)+ Added
methods@1.1.2(transitive)+ Added
mime@1.6.0(transitive)+ Added
mime-db@1.52.01.54.0(transitive)+ Added
mime-types@2.1.35(transitive)+ Added
minimist@1.2.8(transitive)+ Added
mkdirp@0.5.6(transitive)+ Added
moment@2.31.0(transitive)+ Added
mongodb@2.2.34(transitive)+ Added
mongodb-core@2.1.18(transitive)+ Added
mongoose@4.13.21(transitive)+ Added
morgan@1.7.0(transitive)+ Added
mpath@0.5.1(transitive)+ Added
mpromise@0.5.5(transitive)+ Added
mquery@2.3.3(transitive)+ Added
ms@0.7.10.7.22.0.02.1.3(transitive)+ Added
muri@1.3.0(transitive)+ Added
nan@2.6.2(transitive)+ Added
negotiator@0.6.30.6.4(transitive)+ Added
node-pre-gyp@0.6.36(transitive)+ Added
nopt@4.0.3(transitive)+ Added
npmlog@4.1.2(transitive)+ Added
number-is-nan@1.0.1(transitive)+ Added
oauth@0.10.20.9.15(transitive)+ Added
oauth-sign@0.9.0(transitive)+ Added
object-assign@4.1.1(transitive)+ Added
object-inspect@1.13.4(transitive)+ Added
on-finished@2.3.02.4.2(transitive)+ Added
on-headers@1.0.21.1.0(transitive)+ Added
optimist@0.3.7(transitive)+ Added
orcinusd@0.3.3(transitive)+ Added
os-homedir@1.0.2(transitive)+ Added
os-tmpdir@1.0.2(transitive)+ Added
osenv@0.1.5(transitive)+ Added
parseurl@1.3.3(transitive)+ Added
passport@0.3.2(transitive)+ Added
passport-github@1.1.0(transitive)+ Added
passport-google-oauth@1.0.0(transitive)+ Added
passport-google-oauth1@1.0.0(transitive)+ Added
passport-google-oauth20@1.0.0(transitive)+ Added
passport-local@1.0.0(transitive)+ Added
passport-oauth1@1.3.0(transitive)+ Added
passport-oauth2@1.8.0(transitive)+ Added
passport-strategy@1.0.0(transitive)+ Added
path@0.12.7(transitive)+ Added
path-to-regexp@0.1.13(transitive)+ Added
pause@0.0.1(transitive)+ Added
performance-now@2.1.0(transitive)+ Added
possible-typed-array-names@1.1.0(transitive)+ Added
process@0.11.10(transitive)+ Added
process-nextick-args@1.0.72.0.1(transitive)+ Added
promise@2.0.06.1.0(transitive)+ Added
proxy-addr@2.0.8(transitive)+ Added
psl@1.15.0(transitive)+ Added
pump@1.0.3(transitive)+ Added
punycode@2.3.1(transitive)+ Added
qs@6.16.26.2.06.5.5(transitive)+ Added
range-parser@1.2.1(transitive)+ Added
raw-body@2.1.72.5.3(transitive)+ Added
rc@1.2.8(transitive)+ Added
readable-stream@1.0.342.2.72.3.8(transitive)+ Added
regexp-clone@0.0.1(transitive)+ Added
repeat-string@1.6.1(transitive)+ Added
request@2.88.2(transitive)+ Added
require_optional@1.0.1(transitive)+ Added
requires-port@1.0.0(transitive)+ Added
resolve-from@2.0.0(transitive)+ Added
right-align@0.1.3(transitive)+ Added
rimraf@2.7.1(transitive)+ Added
safe-buffer@5.1.25.2.1(transitive)+ Added
safer-buffer@2.1.2(transitive)+ Added
semver@5.7.2(transitive)+ Added
send@0.19.2(transitive)+ Added
serve-favicon@2.3.2(transitive)+ Added
serve-static@1.16.3(transitive)+ Added
set-blocking@2.0.0(transitive)+ Added
set-function-length@1.2.2(transitive)+ Added
setprototypeof@1.0.21.2.0(transitive)+ Added
side-channel@1.1.1(transitive)+ Added
side-channel-list@1.0.1(transitive)+ Added
side-channel-map@1.0.1(transitive)+ Added
side-channel-weakmap@1.0.2(transitive)+ Added
signal-exit@3.0.7(transitive)+ Added
sliced@0.0.51.0.1(transitive)+ Added
source-map@0.1.430.4.40.5.7(transitive)+ Added
split-ca@1.0.1(transitive)+ Added
sshpk@1.18.0(transitive)+ Added
statuses@1.5.02.0.2(transitive)+ Added
string-width@1.0.2(transitive)+ Added
string_decoder@0.10.311.0.31.1.1(transitive)+ Added
strip-ansi@3.0.1(transitive)+ Added
strip-json-comments@2.0.1(transitive)+ Added
tar@2.2.2(transitive)+ Added
tar-fs@1.16.6(transitive)+ Added
tar-pack@3.4.1(transitive)+ Added
tar-stream@1.6.2(transitive)+ Added
through@2.3.8(transitive)+ Added
to-buffer@1.2.2(transitive)+ Added
toidentifier@1.0.1(transitive)+ Added
topo@1.1.0(transitive)+ Added
tough-cookie@2.5.0(transitive)+ Added
transformers@2.1.0(transitive)+ Added
tunnel-agent@0.6.0(transitive)+ Added
tweetnacl@0.14.5(transitive)+ Added
type-is@1.6.18(transitive)+ Added
typed-array-buffer@1.0.3(transitive)+ Added
typedarray@0.0.6(transitive)+ Added
uglify-js@2.2.52.8.29(transitive)+ Added
uglify-to-browserify@1.0.2(transitive)+ Added
uid-number@0.0.6(transitive)+ Added
uid2@0.0.4(transitive)+ Added
underscore@1.13.8(transitive)+ Added
unpipe@1.0.0(transitive)+ Added
urandom@0.0.2(transitive)+ Added
uri-js@4.4.1(transitive)+ Added
util@0.10.4(transitive)+ Added
util-deprecate@1.0.2(transitive)+ Added
utils-merge@1.0.1(transitive)+ Added
uuid@3.4.0(transitive)+ Added
vary@1.1.2(transitive)+ Added
verror@1.10.0(transitive)+ Added
void-elements@2.0.1(transitive)+ Added
which-typed-array@1.1.24(transitive)+ Added
wide-align@1.1.5(transitive)+ Added
window-size@0.1.0(transitive)+ Added
with@4.0.3(transitive)+ Added
wordwrap@0.0.20.0.3(transitive)+ Added
xtend@4.0.2(transitive)+ Added
yargs@3.10.0(transitive)