Update package.json

[jadoonf]

No description provided.

[jadoonf]

📊 Package size report   31%↑

File	Before	After
package.json	904 B	334%↑3.9 kB
Total (Includes all files)	9.8 kB	31%↑12.8 kB
Tarball size	3.8 kB	21%↑4.5 kB

Unchanged files

File	Size
.github/workflows/explain.yml	736 B
.github/workflows/lstn.yml	319 B
.github/workflows/package-size-report.yml	536 B
.github/workflows/test/lstn-cli-workflow.yml	2.0 kB
.github/workflows/test/lstn-dynamic.yml	378 B
.github/workflows/test/lstn-policy.yml	334 B
index.js	28 B
README.md	3.4 kB
rules.yml	1.2 kB

_{🤖 This report was automatically generated by pkg-size-action}

[github-actions]

listen.dev ∙ Security Report

critical 🚨 5

medium ⚠️ 9

low 🔷 6

🔍 The following behaviors have been detected in the dependency tree during installation

🚨 Critical severity

📑🔀	2 categories

• 📑 Metadata ∙ 2 packages

  
  

  • 📦 google-closure-compiler@20230206.0.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package has inconsistent dependencies in the tarball's package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      google-closure-compiler	20230206.0.0		1	🔗

  • 📦 babel-plugin-syntax-trailing-function-commas@6.22.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package has inconsistent scripts in the tarball's package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      babel-plugin-syntax-trailing-function-commas	6.22.0		1	🔗

• 🔀 Typosquatting ∙ 3 packages

  
  

  • 📦 random-seed@0.3.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • The name of this package closely resembles other package names ("seed-random") which are popular on NPM: it might be a typosquatting attempt ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      random-seed	0.3.0		1	🔗

  • 📦 coffee-script@1.12.7 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • The name of this package closely resembles other package names ("coffeescript") which are popular on NPM: it might be a typosquatting attempt ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      coffee-script	1.12.7		1	🔗

  • 📦 cli-table@0.3.11 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • The name of this package closely resembles other package names ("cli-table3") which are popular on NPM: it might be a typosquatting attempt ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      cli-table	0.3.11		1	🔗

---

⚠️ Medium severity

📡🔎	2 categories

• 📡 Dynamic instrumentation ∙ 1 package

  
  

  • 📦 eslint-plugin-react@6.10.3 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • npm install spawned a process ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      es5-ext	0.10.62	✔️	1	🔗

• 🔎 Static analysis ∙ 8 packages

  
  

  • 📦 yargs@15.4.1 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      yargs	15.4.1		1	🔗

  • 📦 web-streams-polyfill@3.2.1 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      web-streams-polyfill	3.2.1		1	🔗

  • 📦 typescript@3.9.10 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      typescript	3.9.10		1	🔗

  • 📦 eslint-plugin-jest@22.21.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      eslint-plugin-jest	22.21.0		1	🔗

  • 📦 error-stack-parser@2.1.4 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      error-stack-parser	2.1.4		1	🔗

  • 📦 abortcontroller-polyfill@1.7.5 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      abortcontroller-polyfill	1.7.5		1	🔗

  • 📦 @rollup/plugin-replace@5.0.2 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      @rollup/plugin-replace	5.0.2		1	🔗

  • 📦 @rollup/plugin-commonjs@24.1.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      @rollup/plugin-commonjs	24.1.0		1	🔗

---

🔷 Low severity

📑	1 category

• 📑 Metadata ∙ 6 packages

  
  

  • 📦 tmp@0.1.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      tmp	0.1.0		1	🔗

  • 📦 random-seed@0.3.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      random-seed	0.3.0		1	🔗

  • 📦 mkdirp@0.5.6 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      mkdirp	0.5.6		1	🔗

  • 📦 hermes-parser@0.9.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      hermes-parser	0.9.0		1	🔗

  • 📦 hermes-eslint@0.9.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      hermes-eslint	0.9.0		1	🔗

  • 📦 cli-table@0.3.11 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • This package version is 0.X.Y: the semver spec mandates those versions for initial development meaning that anything may change at any time and the public API of this package should not be considered stable. ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      cli-table	0.3.11		1	🔗

---

### 🚩 Some problems have been encountered

🔗 Package not analysed yet ∙ 15 occurrences ∙ Package not analysed yet

• flow-remove-types@2.215.0
• @actuallyworks/node-fetch@2.6.0
• danger@11.2.8
• jest-environment-jsdom@29.6.3
• @rollup/plugin-node-resolve@15.2.1
• pretty-format@29.6.3
• art@0.10.1
• eslint-plugin-no-function-declare-after-return@1.1.0
• rollup@3.28.1
• flow-bin@0.209.0
• core-js@3.32.1
• jest@29.6.3
• jest-cli@29.6.3
• jest-snapshot-serializer-raw@1.2.0
• jest-diff@29.6.3

See docs 🔗

---

Powered by listen.dev