Update package.json

[jadoonf]

No description provided.

[github-actions]

listen.dev ∙ Security Report

critical 🚨 1

medium ⚠️ 3

low 🔷 4

🔍 The following behaviors have been detected in the dependency tree during installation

🚨 Critical severity

📑	1 category

• 📑 Metadata ∙ 1 package

  
  

  • 📦 request-promise-native@1.0.9 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package has inconsistent scripts in the tarball's package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      request-promise-native	1.0.9		1	🔗

---

⚠️ Medium severity

🛡️🔎	2 categories

• 🛡️ Advisories ∙ 1 package

  
  

  • 📦 request@2.88.2 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • Server-Side Request Forgery in Request ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      request	2.88.2		1	🔗

• 🔎 Static analysis ∙ 2 packages

  
  

  • 📦 uuid@3.4.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      uuid	3.4.0		1	🔗

  • 📦 fsevents@1.2.13 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      fsevents	1.2.13		1	🔗

---

🔷 Low severity

📑	1 category

• 📑 Metadata ∙ 4 packages

  
  

  • 📦 urix@0.1.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      urix	0.1.0		1	🔗

  • 📦 source-map-url@0.4.1 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      source-map-url	0.4.1		1	🔗

  • 📦 source-map-resolve@0.5.3 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      source-map-resolve	0.5.3		1	🔗

  • 📦 resolve-url@0.2.1 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      resolve-url	0.2.1		1	🔗

---

Powered by listen.dev

[jadoonf]

📊 Package size report   -3.17%↓

File	Before	After
package.json	904 B	-34.4%↓593 B
Total (Includes all files)	9.8 kB	-3.17%↓9.5 kB
Tarball size	3.7 kB	-2.99%↓3.6 kB

Unchanged files

File	Size
.github/workflows/explain.yml	736 B
.github/workflows/lstn.yml	319 B
.github/workflows/package-size-report.yml	536 B
.github/workflows/test/lstn-cli-workflow.yml	2.0 kB
.github/workflows/test/lstn-dynamic.yml	378 B
.github/workflows/test/lstn-policy.yml	334 B
index.js	28 B
README.md	3.4 kB
rules.yml	1.2 kB

_{🤖 This report was automatically generated by pkg-size-action}

[jadoonf]

listen.dev ∙ Security Report

	Critical	Medium	Low
Count	🚨 1	⚠️ 3	🔷 4

---

🔍 The following behaviors have been detected in the dependency tree during installation

🚨 Critical severity

	Categories
Count	📑 1

📑 Metadata - 1 package

📦 request-promise-native@1.0.9 - open 🔗

This package has inconsistent scripts in the tarball's package.json - 1 total occurrence

Name	Version	Transitive Dependency	Occurrences	More
request-promise-native	1.0.9		1	🔗

---

⚠️ Medium severity

	Categories
Count	🛡️🔎 2

🛡️ Advisories - 1 package

📦 request@2.88.2 - open 🔗

Server-Side Request Forgery in Request - 1 total occurrence

Name	Version	Transitive Dependency	Occurrences	More
request	2.88.2		1	🔗

🔎 Static analysis - 2 packages

📦 uuid@3.4.0 - open 🔗

install script detected in package.json - 1 total occurrence

Name	Version	Transitive Dependency	Occurrences	More
uuid	3.4.0		1	🔗

📦 fsevents@1.2.13 - open 🔗

install script detected in package.json - 1 total occurrence

Name	Version	Transitive Dependency	Occurrences	More
fsevents	1.2.13		1	🔗

---

🔷 Low severity

	Categories
Count	📑 1

📑 Metadata - 4 packages

📦 urix@0.1.0 - open 🔗

This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. - 1 total occurrence

Name	Version	Transitive Dependency	Occurrences	More
urix	0.1.0		1	🔗

📦 source-map-url@0.4.1 - open 🔗

This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. - 1 total occurrence

Name	Version	Transitive Dependency	Occurrences	More
source-map-url	0.4.1		1	🔗

📦 source-map-resolve@0.5.3 - open 🔗

This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. - 1 total occurrence

Name	Version	Transitive Dependency	Occurrences	More
source-map-resolve	0.5.3		1	🔗

📦 resolve-url@0.2.1 - open 🔗

This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. - 1 total occurrence

Name	Version	Transitive Dependency	Occurrences	More
resolve-url	0.2.1		1	🔗

---

Powered by listen.dev

[jadoonf]

listen.dev ∙ Security Report

Severity	Count	Packages
🚨 Critical	1	request-promise-native@1.0.9
⚠️ Medium	3	request@2.88.2, uuid@3.4.0, fsevents@1.2.13
🔷 Low	4	urix@0.1.0, source-map-url@0.4.1, source-map-resolve@0.5.3, resolve-url@0.2.1

---

[jadoonf]

listen.dev ∙ Security Report

🚨 Critical: 1 | ⚠️ Medium: 3 | 🔷 Low: 4

Critical Severity (1)

• request-promise-native@1.0.9 - Details

Medium Severity (3)

• request@2.88.2 - Details
• uuid@3.4.0 - Details
• fsevents@1.2.13 - Details

Low Severity (4)

• urix@0.1.0 - Details
• source-map-url@0.4.1 - Details
• source-map-resolve@0.5.3 - Details
• resolve-url@0.2.1 - Details

---

Powered by listen.dev

[jadoonf]

listen.dev ∙ Security Report

Click on the package names for more details.

🚨 Critical (1)

• request-promise-native@1.0.9

⚠️ Medium (3)

• request@2.88.2
• uuid@3.4.0
• fsevents@1.2.13

🔷 Low (4)

• urix@0.1.0
• source-map-url@0.4.1
• source-map-resolve@0.5.3
• resolve-url@0.2.1

---

Powered by listen.dev