plv8x - npm Package Compare versions

Comparing version 0.3.5 to 0.3.6

bin/cmd.js

@@ -52,3 +52,3 @@ #!/usr/bin/env node
 }).argv;
-conString = argv.db || process.env['PLV8XDB'] || process.env.TESTDBNAME;
+conString = argv.db || process.env['PLV8XCONN'] || process.env['PLV8XDB'] || process.env.TESTDBNAME;
 plv8x['new'](conString, function(plx){
@@ -55,0 +55,0 @@ var done, ref$, name, manifest, ref1$, spec, source, code;

package.json

@@ -10,3 +10,3 @@ {
   "description": "Use JavaScript expressions and modules in PostgreSQL plv8",
-  "version": "0.3.5",
+  "version": "0.3.6",
   "keywords": [
@@ -13,0 +13,0 @@ "postgres",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

90124

increased by28.97%

Number of package files

26

increased by4%

Worsened metrics

Number of low supply chain risk alerts

7

increased by16.67%

No dependency changes