@babel/core - npm Package Compare versions

Comparing version 7.27.3 to 7.27.4

lib/index.js

@@ -215,3 +215,3 @@ "use strict";
 ;
-const version = exports.version = "7.27.3";
+const version = exports.version = "7.27.4";
 const resolvePlugin = (name, dirname) => resolvers.resolvePlugin(name, dirname, false).filepath;
@@ -218,0 +218,0 @@ exports.resolvePlugin = resolvePlugin;

lib/transformation/file/file.js

@@ -119,2 +119,3 @@ "use strict";
   availableHelper(name, versionRange) {
+    if (helpers().isInternal(name)) return false;
     let minVersion;
@@ -134,2 +135,8 @@ try {
   addHelper(name) {
+    if (helpers().isInternal(name)) {
+      throw new Error("Cannot use internal helper " + name);
+    }
+    return this._addHelper(name);
+  }
+  _addHelper(name) {
     const declar = this.declarations[name];
@@ -146,3 +153,3 @@ if (declar) return cloneNode(declar);
     for (const dep of helpers().getDependencies(name)) {
-      dependencies[dep] = this.addHelper(dep);
+      dependencies[dep] = this._addHelper(dep);
     }
@@ -149,0 +156,0 @@ const {

package.json

 {
   "name": "@babel/core",
-  "version": "7.27.3",
+  "version": "7.27.4",
   "description": "Babel compiler core.",
@@ -54,6 +54,6 @@ "main": "./lib/index.js",
     "@babel/helper-module-transforms": "^7.27.3",
-    "@babel/helpers": "^7.27.3",
-    "@babel/parser": "^7.27.3",
+    "@babel/helpers": "^7.27.4",
+    "@babel/parser": "^7.27.4",
     "@babel/template": "^7.27.2",
-    "@babel/traverse": "^7.27.3",
+    "@babel/traverse": "^7.27.4",
     "@babel/types": "^7.27.3",
@@ -60,0 +60,0 @@ "convert-source-map": "^2.0.0",

New alerts

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 2 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 2 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

795044

0.09%

Lines of code

6907

0.1%

Dependency changes

• Updated

  @babel/helpers@^7.27.4

• Updated

  @babel/parser@^7.27.4

• Updated

  @babel/traverse@^7.27.4