Comparing version 0.1.0 to 0.2.0
{ | ||
"name": "runme", | ||
"version": "0.1.0", | ||
"version": "0.2.0", | ||
"author": "Christian Bromann <christian@stateful.com>", | ||
@@ -9,2 +9,3 @@ "license": "Apache-2.0", | ||
"exports": "./dist/index.js", | ||
"bin": "./bin/runme.js", | ||
"type": "module", | ||
@@ -36,2 +37,3 @@ "repository": { | ||
"@types/node": "^18.11.9", | ||
"@types/tar-fs": "^2.0.1", | ||
"@vitest/coverage-c8": "^0.24.5", | ||
@@ -42,6 +44,9 @@ "c8": "^7.12.0", | ||
"rimraf": "^3.0.2", | ||
"tar-fs": "^2.1.1", | ||
"typescript": "^4.8.4", | ||
"vitest": "^0.24.5" | ||
}, | ||
"dependencies": { | ||
"node-fetch": "^3.2.10", | ||
"tar-fs": "^2.1.1" | ||
} | ||
} |
@@ -21,2 +21,9 @@ # Runme.js | ||
You can also install the package globally and it as a CLI, e.g.: | ||
```sh | ||
npm i -g runme | ||
runme list | ||
``` | ||
### Deno | ||
@@ -23,0 +30,0 @@ |
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
6211710
16
690
57
2
1
+ Addednode-fetch@^3.2.10
+ Addedtar-fs@^2.1.1
+ Addedbase64-js@1.5.1(transitive)
+ Addedbl@4.1.0(transitive)
+ Addedbuffer@5.7.1(transitive)
+ Addedchownr@1.1.4(transitive)
+ Addeddata-uri-to-buffer@4.0.1(transitive)
+ Addedend-of-stream@1.4.4(transitive)
+ Addedfetch-blob@3.2.0(transitive)
+ Addedformdata-polyfill@4.0.10(transitive)
+ Addedfs-constants@1.0.0(transitive)
+ Addedieee754@1.2.1(transitive)
+ Addedinherits@2.0.4(transitive)
+ Addedmkdirp-classic@0.5.3(transitive)
+ Addednode-domexception@1.0.0(transitive)
+ Addednode-fetch@3.3.2(transitive)
+ Addedonce@1.4.0(transitive)
+ Addedpump@3.0.2(transitive)
+ Addedreadable-stream@3.6.2(transitive)
+ Addedsafe-buffer@5.2.1(transitive)
+ Addedstring_decoder@1.3.0(transitive)
+ Addedtar-fs@2.1.2(transitive)
+ Addedtar-stream@2.2.0(transitive)
+ Addedutil-deprecate@1.0.2(transitive)
+ Addedweb-streams-polyfill@3.3.3(transitive)
+ Addedwrappy@1.0.2(transitive)