@ai-sdk/provider-utils - npm Package Compare versions

Comparing version 5.0.3 to 5.0.4

CHANGELOG.md

 # @ai-sdk/provider-utils
 
+## 5.0.4
+
+### Patch Changes
+
+- c6f5e62: Prevent prototype pollution when synchronously parsing provider JSON inputs and expose `secureJsonParse` from provider-utils.
+
 ## 5.0.3
@@ -4,0 +10,0 @@

package.json

 {
   "name": "@ai-sdk/provider-utils",
-  "version": "5.0.3",
+  "version": "5.0.4",
   "type": "module",
@@ -5,0 +5,0 @@ "license": "Apache-2.0",

src/index.ts

@@ -87,2 +87,3 @@ export { asArray } from './as-array';
 export { serializeModelOptions } from './serialize-model-options';
+export { secureJsonParse } from './secure-json-parse';
 export {
@@ -89,0 +90,0 @@ StreamingToolCallTracker,

No alert changes

Improved metrics

Total package byte prevSize

756828

0.05%

Lines of code

13073

0.02%

No dependency changes