Update package.json

[jadoonf]

testing cohere-node deps

[github-actions]

listen.dev ∙ Security Report

critical 🚨 1

medium ⚠️ 7

low 🔷 0

🔍 The following behaviors have been detected in the dependency tree during installation

🚨 Critical severity

🔀	1 category

• 🔀 Typosquatting ∙ 1 package

  
  

  • 📦 jq@1.7.2 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • The name of this package closely resembles other package names ("q") which are popular on NPM: it might be a typosquatting attempt ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      jq	1.7.2		1	🔗

---

⚠️ Medium severity

📡🔎	2 categories

• 📡 Dynamic instrumentation ∙ 1 package

  
  

  • 📦 jq@1.7.2 ∙ 4 occurrences ∙ 2 kind of issues ∙ open 🔗

    
    

    • npm install spawned a process ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      contextify	0.1.15	✔️	1	🔗

    • unexpected outbound connection destination ∙ 3 total occurrences

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      contextify	0.1.15	✔️	3	🔗

• 🔎 Static analysis ∙ 3 packages

  
  

  • 📦 ts-node@10.9.1 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      ts-node	10.9.1		1	🔗

  • 📦 eslint-webpack-plugin@2.7.0 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      eslint-webpack-plugin	2.7.0		1	🔗

  • 📦 copy-webpack-plugin@8.1.1 ∙ 1 occurrence ∙ 1 kind of issue ∙ open 🔗

    
    

    • install script detected in package.json ∙ 1 total occurrence

      
      

      Name	Version	Transitive Dependency	Occurrences	More
      copy-webpack-plugin	8.1.1		1	🔗

---

🚩 Some problems have been encountered

🔗 Package not analysed yet ∙ 2 occurrences ∙ Package not analysed yet

• webpack@5.89.0
• nodemon-webpack-plugin@4.8.2

See docs 🔗

---

Powered by listen.dev