sjcl - npm Package Compare versions
New alerts
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Unidentified License
LicenseSomething that seems like a license was found, but its contents could not be matched with a known license.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
15346254
45.58%- Number of lines in readme file
35
59.09%- Number of medium supply chain risk alerts
0
-100%Worsened metrics
- Dev dependency count
2
Infinity%- Number of package files
133
-36.06%- Number of low license alerts
1
Infinity%- License quality
80
-20%- Lines of code
27159
-27.37%- Number of low supply chain risk alerts
91
35.82%