scripty-strokes
Advanced tools
Comparing version 0.5.2 to 0.5.3
{ | ||
"name": "scripty-strokes", | ||
"version": "0.5.2", | ||
"version": "0.5.3", | ||
"main": "index.js", | ||
"license": "MIT", | ||
"files": [ | ||
"scripty_modules", | ||
"@types/strokesplus.net/index.d.ts" | ||
"keywords": [ | ||
"StrokesPlus", | ||
"StrokesPlus.net" | ||
], | ||
"author": { | ||
"name": "Kevin Hill", | ||
"email": "kevinkhill@gmail.com" | ||
}, | ||
"homepage": "https://github.com/kevinkhill/scripty-strokes", | ||
"scripts": { | ||
"lint": "eslint --ext=.js ./scripty_modules" | ||
"lint": "eslint ./scripty_*/**/*.js" | ||
}, | ||
@@ -13,0 +18,0 @@ "devDependencies": { |
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
No contributors or author data
MaintenancePackage does not specify a list of contributors or an author in package.json.
Found 1 instance in 1 package
No website
QualityPackage does not have a website.
Found 1 instance in 1 package
732046
71
1253
1
5
4