tago - npm Package Compare versions
File Diff Unavailable
File-level differences cannot be displayed because the package archive for version 9.3.13 is not available. However, you can still view changes in alerts, metrics, and dependencies below.
New alerts
Missing package tarball
QualityThis package is missing its tarball. It could be removed from the npm registry or there may have been an error when publishing.
Fixed alerts
Deprecated
MaintenanceThe maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.
Unpopular package
QualityThis package is not very popular.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 9 instances
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Dependency count
0
-100%- Number of medium maintenance alerts
0
-100%- Number of low quality alerts
0
-100%- Number of medium quality alerts
0
-100%- Number of low supply chain risk alerts
0
-100%Worsened metrics
- Total package byte prevSize
0
-100%- Number of package files
0
-100%- License quality
0
-100%- Lines of code
0
-100%- Number of critical quality alerts
1
Infinity%- Number of lines in readme file
0
-100%Dependency changes
- Removed
axios@0.27.2- Removed
form-data@4.0.0- Removed
qs@6.10.5- Removed
socket.io-client@4.5.1- Removed
@socket.io/component-emitter@3.1.2(transitive)- Removed
async-function@1.0.0(transitive)- Removed
async-generator-function@1.0.0(transitive)- Removed
asynckit@0.4.0(transitive)- Removed
axios@0.27.2(transitive)- Removed
call-bind-apply-helpers@1.0.2(transitive)- Removed
call-bound@1.0.4(transitive)- Removed
combined-stream@1.0.8(transitive)- Removed
debug@4.3.74.4.3(transitive)- Removed
delayed-stream@1.0.0(transitive)- Removed
dunder-proto@1.0.1(transitive)- Removed
engine.io-client@6.2.3(transitive)- Removed
engine.io-parser@5.0.7(transitive)- Removed
es-define-property@1.0.1(transitive)- Removed
es-errors@1.3.0(transitive)- Removed
es-object-atoms@1.1.2(transitive)- Removed
follow-redirects@1.16.1(transitive)- Removed
form-data@4.0.0(transitive)- Removed
function-bind@1.1.2(transitive)- Removed
generator-function@2.0.1(transitive)- Removed
get-intrinsic@1.3.1(transitive)- Removed
get-proto@1.0.1(transitive)- Removed
gopd@1.2.0(transitive)- Removed
has-symbols@1.1.0(transitive)- Removed
hasown@2.0.4(transitive)- Removed
math-intrinsics@1.1.0(transitive)- Removed
mime-db@1.52.0(transitive)- Removed
mime-types@2.1.35(transitive)- Removed
ms@2.1.3(transitive)- Removed
object-inspect@1.13.4(transitive)- Removed
qs@6.10.5(transitive)- Removed
side-channel@1.1.1(transitive)- Removed
side-channel-list@1.0.1(transitive)- Removed
side-channel-map@1.0.1(transitive)- Removed
side-channel-weakmap@1.0.2(transitive)- Removed
socket.io-client@4.5.1(transitive)- Removed
socket.io-parser@4.2.7(transitive)- Removed
ws@8.2.3(transitive)- Removed
xmlhttprequest-ssl@2.0.0(transitive)