python-wasm - npm Package Compare versions

Comparing version 0.27.1 to 0.28.0

dist/test/no-stdio.test.js

@@ -17,2 +17,3 @@ "use strict";
 test("use noStdio", async () => {
+    jest.setTimeout(15000);
     const python = await (0, node_1.asyncPython)({ noStdio: true });
@@ -19,0 +20,0 @@ // capture stdout and stderr to a string.  Actual stdout/stderr is a Buffer.

package.json

 {
   "name": "python-wasm",
-  "version": "0.27.1",
+  "version": "0.28.0",
   "description": "python-wasm -- WebAssembly Python for servers and browsers with sympy, Cython, numpy, and more",
@@ -40,9 +40,9 @@ "main": "./dist/node.js",
     "typescript": "^4.8.4",
+    "@cowasm/py-cython": "1.1.0",
+    "@cowasm/py-mpmath": "1.0.0",
+    "@cowasm/posix-wasm": "1.2.1",
     "@cowasm/cpython": "1.6.0",
-    "@cowasm/py-cython": "1.0.0",
-    "@cowasm/posix-wasm": "1.2.1",
-    "@cowasm/py-mpmath": "1.0.0",
-    "@cowasm/py-numpy": "1.0.2",
-    "@cowasm/py-pandas": "1.0.1",
-    "@cowasm/py-sympy": "1.0.0"
+    "@cowasm/py-numpy": "1.1.0",
+    "@cowasm/py-sympy": "1.0.0",
+    "@cowasm/py-pandas": "1.1.0"
   },
@@ -49,0 +49,0 @@ "scripts": {

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

49380494

0.08%

Lines of code

1087

0.09%

No dependency changes