vscode-languageserver
Advanced tools
vscode-languageserver - npm Package Compare versions
Comparing version 0.10.0-pre.14 to 0.10.0-pre.15
| { | ||
| "name": "vscode-languageserver", | ||
| "description": "Language server implementation for node", | ||
| "version": "0.10.0-pre.14", | ||
| "version": "0.10.0-pre.15", | ||
| "author": "Microsoft Corporation", | ||
| "license": "MIT", | ||
| "files": [ | ||
| "./lib", | ||
| "./tools" | ||
| ], | ||
| "main": "./lib/main.js", | ||
| "typings": "./lib/main", | ||
| "bin": { | ||
| "copyServerPackage": "./tools/copyServerPackage" | ||
| }, | ||
| "devDependencies": { | ||
@@ -17,0 +10,0 @@ "mocha": "^2.3.2", |
New alerts
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Fixed alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Found 1 instance in 1 package
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
- increased by5344.9%
37352
- Number of package files
- increased by700%
16
- Lines of code
- increased byInfinity%
913
Worsened metrics
- Number of low supply chain risk alerts
- increased by400%
5