New:Introducing Socket Scanning for VS Code Marketplace Extensions.Learn more →
polyapi - npm Package Compare versions
New alerts
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 2 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
841814
15.27%- Number of package files
186
2.76%- Lines of code
10335
18.37%Worsened metrics
- Dev dependency count
17
6.25%- Number of low supply chain risk alerts
89
11.25%No dependency changes