syncrona - npm Package Compare versions
New alerts
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Fixed alerts
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 2 instances
No website
QualityPackage does not have a website.
Improved metrics
- Total package byte prevSize
505298
37.91%- Dev dependency count
8
-11.11%- Number of package files
87
2.35%- Lines of code
10356
31.4%- Number of low quality alerts
1
-50%- Number of lines in readme file
102
4.08%Worsened metrics
- Number of low supply chain risk alerts
59
3.51%- Number of medium supply chain risk alerts
8
14.29%Dependency changes
+ Added
@inquirer/ansi@2.0.8(transitive)+ Added
@inquirer/checkbox@5.2.5(transitive)+ Added
@inquirer/confirm@6.3.2(transitive)+ Added
@inquirer/core@12.0.3(transitive)+ Added
@inquirer/editor@5.3.3(transitive)+ Added
@inquirer/expand@5.1.5(transitive)+ Added
@inquirer/external-editor@3.0.5(transitive)+ Added
@inquirer/figures@2.0.9(transitive)+ Added
@inquirer/input@5.1.6(transitive)+ Added
@inquirer/number@4.2.3(transitive)+ Added
@inquirer/password@5.2.2(transitive)+ Added
@inquirer/prompts@8.7.2(transitive)+ Added
@inquirer/rawlist@5.3.5(transitive)+ Added
@inquirer/search@4.3.3(transitive)+ Added
@inquirer/select@5.2.5(transitive)+ Added
@inquirer/type@4.1.1(transitive)+ Added
chalk@5.6.2(transitive)+ Added
chokidar@5.0.0(transitive)+ Added
cli-width@4.1.0(transitive)+ Added
fast-string-truncated-width@3.0.3(transitive)+ Added
fast-string-width@3.0.2(transitive)+ Added
fast-wrap-ansi@0.2.2(transitive)+ Added
inquirer@14.2.2(transitive)+ Added
mute-stream@3.0.0(transitive)+ Added
readdirp@5.1.1(transitive)+ Added
run-async@4.0.6(transitive)+ Added
signal-exit@4.1.0(transitive)- Removed
@inquirer/external-editor@1.0.3(transitive)- Removed
ansi-escapes@4.3.2(transitive)- Removed
ansi-regex@5.0.1(transitive)- Removed
ansi-styles@4.3.0(transitive)- Removed
anymatch@3.1.3(transitive)- Removed
base64-js@1.5.1(transitive)- Removed
binary-extensions@2.3.0(transitive)- Removed
bl@4.1.0(transitive)- Removed
braces@3.0.3(transitive)- Removed
buffer@5.7.1(transitive)- Removed
chalk@4.1.2(transitive)- Removed
chokidar@3.6.0(transitive)- Removed
cli-cursor@3.1.0(transitive)- Removed
cli-spinners@2.9.2(transitive)- Removed
cli-width@3.0.0(transitive)- Removed
clone@1.0.4(transitive)- Removed
color-convert@2.0.1(transitive)- Removed
color-name@1.1.4(transitive)- Removed
defaults@1.0.4(transitive)- Removed
emoji-regex@8.0.0(transitive)- Removed
escape-string-regexp@1.0.5(transitive)- Removed
figures@3.2.0(transitive)- Removed
fill-range@7.1.1(transitive)- Removed
fsevents@2.3.3(transitive)- Removed
glob-parent@5.1.2(transitive)- Removed
has-flag@4.0.0(transitive)- Removed
ieee754@1.2.1(transitive)- Removed
inquirer@8.2.7(transitive)- Removed
is-binary-path@2.1.0(transitive)- Removed
is-extglob@2.1.1(transitive)- Removed
is-fullwidth-code-point@3.0.0(transitive)- Removed
is-glob@4.0.3(transitive)- Removed
is-interactive@1.0.0(transitive)- Removed
is-number@7.0.0(transitive)- Removed
is-unicode-supported@0.1.0(transitive)- Removed
log-symbols@4.1.0(transitive)- Removed
mimic-fn@2.1.0(transitive)- Removed
mute-stream@0.0.8(transitive)- Removed
normalize-path@3.0.0(transitive)- Removed
onetime@5.1.2(transitive)- Removed
ora@5.4.1(transitive)- Removed
picomatch@2.3.2(transitive)- Removed
readdirp@3.6.0(transitive)- Removed
restore-cursor@3.1.0(transitive)- Removed
run-async@2.4.1(transitive)- Removed
rxjs@7.8.2(transitive)- Removed
signal-exit@3.0.7(transitive)- Removed
string-width@4.2.3(transitive)- Removed
strip-ansi@6.0.1(transitive)- Removed
supports-color@7.2.0(transitive)- Removed
through@2.3.8(transitive)- Removed
to-regex-range@5.0.1(transitive)- Removed
tslib@2.8.1(transitive)- Removed
type-fest@0.21.3(transitive)- Removed
wcwidth@1.0.1(transitive)- Removed
wrap-ansi@6.2.0(transitive)Updated
@syncrona/jira@^0.9.1Updated
@syncrona/types@^0.9.1Updated
chalk@^5.6.2Updated
chokidar@^5.0.0Updated
inquirer@^14.0.2