zachleat - npm Package Compare versions
New alerts
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Number of lines in readme file
35
2.94%- Number of low supply chain risk alerts
1
-50%Worsened metrics
- Total package byte prevSize
2986
-2.67%- Lines of code
18
-21.74%Dependency changes
+ Added
@pnpm/config.env-replace@1.1.0(transitive)+ Added
@pnpm/network.ca-file@1.0.2(transitive)+ Added
@pnpm/npm-conf@3.0.3(transitive)+ Added
ansi-regex@6.4.0(transitive)+ Added
ansi-styles@6.2.3(transitive)+ Added
atomically@2.1.1(transitive)+ Added
boxen@8.0.1(transitive)+ Added
camelcase@8.0.0(transitive)+ Added
chalk@5.6.2(transitive)+ Added
cli-boxes@3.0.0(transitive)+ Added
config-chain@1.1.13(transitive)+ Added
configstore@7.1.0(transitive)+ Added
dot-prop@9.0.0(transitive)+ Added
emoji-regex@10.6.0(transitive)+ Added
escape-goat@4.0.0(transitive)+ Added
get-east-asian-width@1.7.0(transitive)+ Added
global-directory@4.0.1(transitive)+ Added
graceful-fs@4.2.10(transitive)+ Added
ini@4.1.1(transitive)+ Added
is-in-ci@1.0.0(transitive)+ Added
is-installed-globally@1.0.1(transitive)+ Added
is-npm@6.1.0(transitive)+ Added
is-path-inside@4.0.0(transitive)+ Added
ky@1.14.3(transitive)+ Added
latest-version@9.0.0(transitive)+ Added
package-json@10.0.1(transitive)+ Added
proto-list@1.2.4(transitive)+ Added
pupa@3.3.0(transitive)+ Added
registry-auth-token@5.1.1(transitive)+ Added
registry-url@6.0.1(transitive)+ Added
string-width@7.2.0(transitive)+ Added
strip-ansi@7.2.0(transitive)+ Added
stubborn-fs@2.0.0(transitive)+ Added
stubborn-utils@1.0.2(transitive)+ Added
type-fest@4.41.0(transitive)+ Added
update-notifier@7.3.1(transitive)+ Added
when-exit@2.1.5(transitive)+ Added
widest-line@5.0.0(transitive)+ Added
wrap-ansi@9.0.2(transitive)+ Added
xdg-basedir@5.1.0(transitive)- Removed
@sindresorhus/is@0.14.0(transitive)- Removed
@szmarczak/http-timer@1.1.2(transitive)- Removed
ansi-styles@4.3.0(transitive)- Removed
boxen@5.1.2(transitive)- Removed
cacheable-request@6.1.0(transitive)- Removed
camelcase@6.3.0(transitive)- Removed
chalk@4.1.2(transitive)- Removed
ci-info@2.0.0(transitive)- Removed
cli-boxes@2.2.1(transitive)- Removed
clone-response@1.0.3(transitive)- Removed
color-convert@2.0.1(transitive)- Removed
color-name@1.1.4(transitive)- Removed
configstore@5.0.1(transitive)- Removed
crypto-random-string@2.0.0(transitive)- Removed
decompress-response@3.3.0(transitive)- Removed
defer-to-connect@1.1.3(transitive)- Removed
dot-prop@5.3.0(transitive)- Removed
duplexer3@0.1.5(transitive)- Removed
end-of-stream@1.4.5(transitive)- Removed
escape-goat@2.1.1(transitive)- Removed
get-stream@4.1.05.2.0(transitive)- Removed
global-dirs@3.0.1(transitive)- Removed
got@9.6.0(transitive)- Removed
has-flag@4.0.0(transitive)- Removed
has-yarn@2.1.0(transitive)- Removed
http-cache-semantics@4.3.0(transitive)- Removed
import-lazy@2.1.0(transitive)- Removed
imurmurhash@0.1.4(transitive)- Removed
ini@2.0.0(transitive)- Removed
is-ci@2.0.0(transitive)- Removed
is-installed-globally@0.4.0(transitive)- Removed
is-npm@5.0.0(transitive)- Removed
is-obj@2.0.0(transitive)- Removed
is-path-inside@3.0.3(transitive)- Removed
is-typedarray@1.0.0(transitive)- Removed
is-yarn-global@0.3.0(transitive)- Removed
json-buffer@3.0.0(transitive)- Removed
keyv@3.1.0(transitive)- Removed
latest-version@5.1.0(transitive)- Removed
lowercase-keys@1.0.12.0.0(transitive)- Removed
make-dir@3.1.0(transitive)- Removed
mimic-response@1.0.1(transitive)- Removed
normalize-url@4.5.1(transitive)- Removed
once@1.4.0(transitive)- Removed
p-cancelable@1.1.0(transitive)- Removed
package-json@6.5.0(transitive)- Removed
prepend-http@2.0.0(transitive)- Removed
pump@3.0.4(transitive)- Removed
pupa@2.1.1(transitive)- Removed
registry-auth-token@4.2.2(transitive)- Removed
registry-url@5.1.0(transitive)- Removed
responselike@1.0.2(transitive)- Removed
semver@6.3.1(transitive)- Removed
semver-diff@3.1.1(transitive)- Removed
signal-exit@3.0.7(transitive)- Removed
supports-color@7.2.0(transitive)- Removed
to-readable-stream@1.0.0(transitive)- Removed
type-fest@0.20.2(transitive)- Removed
typedarray-to-buffer@3.1.5(transitive)- Removed
unique-string@2.0.0(transitive)- Removed
update-notifier@5.1.0(transitive)- Removed
url-parse-lax@3.0.0(transitive)- Removed
widest-line@3.1.0(transitive)- Removed
wrap-ansi@7.0.0(transitive)- Removed
wrappy@1.0.2(transitive)- Removed
write-file-atomic@3.0.3(transitive)- Removed
xdg-basedir@4.0.0(transitive)Updated
update-notifier@^7.3.1