toggle - npm Package Compare versions
New alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
No contributors or author data
MaintenancePackage does not specify a list of contributors or an author in package.json.
Non-permissive License
LicenseA license not known to be considered permissive was found.
Fixed alerts
No README
QualityPackage does not have a README. This may indicate a failed publish or a low quality package.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Dependency count
0
-100%- Number of medium quality alerts
1
-50%- Number of lines in readme file
1
Infinity%- Number of low supply chain risk alerts
1
-75%Worsened metrics
- Total package byte prevSize
244
-94.41%- Number of package files
2
-60%- Number of low license alerts
1
Infinity%- License quality
90
-10%- Lines of code
0
-100%- Number of low maintenance alerts
3
50%- Number of medium supply chain risk alerts
1
Infinity%Dependency changes
- Removed
ask-for@0.0.3- Removed
bluebird@^2.1.3- Removed
colors@^0.6.2- Removed
moment@^2.7.0- Removed
request@^2.36.0- Removed
ajv@6.15.0(transitive)- Removed
ask-for@0.0.3(transitive)- Removed
asn1@0.2.6(transitive)- Removed
assert-plus@1.0.0(transitive)- Removed
asynckit@0.4.0(transitive)- Removed
aws-sign2@0.7.0(transitive)- Removed
aws4@1.13.2(transitive)- Removed
bcrypt-pbkdf@1.0.2(transitive)- Removed
bluebird@2.11.0(transitive)- Removed
caseless@0.12.0(transitive)- Removed
colors@0.6.2(transitive)- Removed
combined-stream@1.0.8(transitive)- Removed
core-util-is@1.0.2(transitive)- Removed
dashdash@1.14.1(transitive)- Removed
delayed-stream@1.0.0(transitive)- Removed
ecc-jsbn@0.1.2(transitive)- Removed
extend@3.0.2(transitive)- Removed
extsprintf@1.3.0(transitive)- Removed
fast-deep-equal@3.1.3(transitive)- Removed
fast-json-stable-stringify@2.1.0(transitive)- Removed
forever-agent@0.6.1(transitive)- Removed
form-data@2.3.3(transitive)- Removed
getpass@0.1.7(transitive)- Removed
har-schema@2.0.0(transitive)- Removed
har-validator@5.1.5(transitive)- Removed
http-signature@1.2.0(transitive)- Removed
is-typedarray@1.0.0(transitive)- Removed
isstream@0.1.2(transitive)- Removed
jsbn@0.1.1(transitive)- Removed
json-schema@0.4.0(transitive)- Removed
json-schema-traverse@0.4.1(transitive)- Removed
json-stringify-safe@5.0.1(transitive)- Removed
jsprim@1.4.2(transitive)- Removed
mime-db@1.52.0(transitive)- Removed
mime-types@2.1.35(transitive)- Removed
moment@2.31.0(transitive)- Removed
oauth-sign@0.9.0(transitive)- Removed
performance-now@2.1.0(transitive)- Removed
psl@1.15.0(transitive)- Removed
punycode@2.3.1(transitive)- Removed
qs@6.5.5(transitive)- Removed
request@2.88.2(transitive)- Removed
safe-buffer@5.2.1(transitive)- Removed
safer-buffer@2.1.2(transitive)- Removed
sshpk@1.18.0(transitive)- Removed
tough-cookie@2.5.0(transitive)- Removed
tunnel-agent@0.6.0(transitive)- Removed
tweetnacl@0.14.5(transitive)- Removed
uri-js@4.4.1(transitive)- Removed
uuid@3.4.0(transitive)- Removed
verror@1.10.0(transitive)