snaplet - npm Package Compare versions

Comparing version 0.36.9 to 0.36.10

package.json

@@ -6,3 +6,3 @@ {
   },
-  "bin": "./bin/snaplet",
+  "bin": "./bin/snaplet.mjs",
   "description": "Snaplet CLI",
@@ -22,3 +22,3 @@ "devDependencies": {
   "files": [
-    "bin",
+    "bin/snaplet.mjs",
     "dist",
@@ -42,3 +42,3 @@ "README.md",
     "build": "tsup src/index.ts --clean --dts --format cjs,esm",
-    "prepublishOnly": "yarn run build && node ./scripts/prepublishOnly.cjs",
+    "prepublishOnly": "yarn run build",
     "postinstall": "node ./scripts/postInstall.cjs"
@@ -48,3 +48,6 @@ },
   "types": "./dist/index.d.ts",
-  "version": "0.36.9"
+  "version": "0.36.10",
+  "dependencies": {
+    "execa": "7.1.0"
+  }
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Lines of code

84

increased by7.69%

Worsened metrics

Total package byte prevSize

4517

decreased by-1.09%

Dependency count

1

increased byInfinity%

Number of package files

7

decreased by-12.5%

Number of low supply chain risk alerts

3

increased by50%

Dependency changes

• + Addedexeca@7.1.0

• + Addedcross-spawn@7.0.6(transitive)

• + Addedexeca@7.1.0(transitive)

• + Addedget-stream@6.0.1(transitive)

• + Addedhuman-signals@4.3.1(transitive)

• + Addedis-stream@3.0.0(transitive)

• + Addedisexe@2.0.0(transitive)

• + Addedmerge-stream@2.0.0(transitive)

• + Addedmimic-fn@4.0.0(transitive)

• + Addednpm-run-path@5.3.0(transitive)

• + Addedonetime@6.0.0(transitive)

• + Addedpath-key@3.1.14.0.0(transitive)

• + Addedshebang-command@2.0.0(transitive)

• + Addedshebang-regex@3.0.0(transitive)

• + Addedsignal-exit@3.0.7(transitive)

• + Addedstrip-final-newline@3.0.0(transitive)

• + Addedwhich@2.0.2(transitive)