tensorlake
Advanced tools
tensorlake - npm Package Compare versions
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Trivial Package
Supply chain riskPackages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.
No tests
QualityPackage does not have any tests. This is a strong signal of a poorly maintained or low quality package.
Fixed alerts
Shrinkwrap
Supply chain riskPackage contains a shrinkwrap file. This may allow the package to bypass normal install procedures.
AI-detected potential security risk
Supply chain riskAI has determined that this package may contain potential security issues or vulnerabilities.
Network access
Supply chain riskThis module accesses the network.
Found 2 instances
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 2 instances
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 3 instances
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 11 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Dependency count
1
-92.31%- Dev dependency count
0
-100%- Number of high supply chain risk alerts
0
-100%- Number of low supply chain risk alerts
0
-100%- Number of medium supply chain risk alerts
2
-81.82%Worsened metrics
- Total package byte prevSize
2506
-99.96%- Number of package files
10
-85.51%- Lines of code
8
-99.99%- Number of low quality alerts
3
50%- Number of lines in readme file
20
-88.1%Dependency changes
+ Added
@tensorlakeai/native-darwin-arm64@0.5.145(transitive)+ Added
@tensorlakeai/native-linux-arm64-gnu@0.5.145(transitive)+ Added
@tensorlakeai/native-linux-arm64-musl@0.5.145(transitive)+ Added
@tensorlakeai/native-linux-x64-gnu@0.5.145(transitive)+ Added
@tensorlakeai/native-linux-x64-musl@0.5.145(transitive)+ Added
@tensorlakeai/native-win32-x64@0.5.145(transitive)+ Added
@tensorlakeai/tensorlake@0.5.145(transitive)- Removed
@grpc/grpc-js@^1.13.0- Removed
@grpc/proto-loader@^0.8.0- Removed
ajv@^8.17.1- Removed
fflate@^0.8.2- Removed
google-proto-files@^5.0.2- Removed
nanoid@^3.3.18- Removed
ws@^8.20.0- Removed
tensorlake-native-darwin-arm64@0.5.143(transitive)- Removed
tensorlake-native-linux-arm64-gnu@0.5.143(transitive)- Removed
tensorlake-native-linux-arm64-musl@0.5.143(transitive)- Removed
tensorlake-native-linux-x64-gnu@0.5.143(transitive)- Removed
tensorlake-native-linux-x64-musl@0.5.143(transitive)- Removed
tensorlake-native-win32-x64@0.5.143(transitive)