sreya - npm Package Compare versions

Comparing version 1.0.0 to 1.1.0

package.json

 {
   "name": "sreya",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "Sreya is a versatile in-memory database for Node.js applications.",
@@ -13,3 +13,3 @@ "main": "dist/index.js",
     "build": "tsc",
-    "test": "nodemon test/test.js"
+    "test": "node test/test.js"
   },
@@ -34,4 +34,10 @@ "repository": {
   "dependencies": {
+    "dotenv": "^16.4.5",
+    "fs": "^0.0.1-security",
     "nodemon": "^3.1.0"
+  },
+  "devDependencies": {
+    "@types/node": "^20.12.7",
+    "typescript": "^5.4.5"
   }
-}
+}

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

20098

increased by1080.85%

Number of package files

14

increased by250%

Lines of code

342

increased by1610%

Worsened metrics

Dependency count

3

increased by200%

Dev dependency count

2

increased byInfinity%

Number of low supply chain risk alerts

6

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addeddotenv@^16.4.5

• + Addedfs@^0.0.1-security

• + Addeddotenv@16.4.7(transitive)

• + Addedfs@0.0.1-security(transitive)