@babel/runtime - npm Package Compare versions

Comparing version 7.26.9 to 7.26.10

helpers/esm/wrapRegExp.js

@@ -36,5 +36,6 @@ import _typeof from "./typeof.js";
       var o = r.get(this);
-      return e[Symbol.replace].call(this, t, p.replace(/\$<([^>]+)>/g, function (e, r) {
-        var t = o[r];
-        return "$" + (Array.isArray(t) ? t.join("$") : t);
+      return e[Symbol.replace].call(this, t, p.replace(/\$<([^>]+)(>|$)/g, function (e, r, t) {
+        if ("" === t) return e;
+        var p = o[r];
+        return Array.isArray(p) ? "$" + p.join("$") : "number" == typeof p ? "$" + p : "";
       }));
@@ -41,0 +42,0 @@ }

helpers/wrapRegExp.js

@@ -36,5 +36,6 @@ var _typeof = require("./typeof.js")["default"];
       var o = r.get(this);
-      return e[Symbol.replace].call(this, t, p.replace(/\$<([^>]+)>/g, function (e, r) {
-        var t = o[r];
-        return "$" + (Array.isArray(t) ? t.join("$") : t);
+      return e[Symbol.replace].call(this, t, p.replace(/\$<([^>]+)(>|$)/g, function (e, r, t) {
+        if ("" === t) return e;
+        var p = o[r];
+        return Array.isArray(p) ? "$" + p.join("$") : "number" == typeof p ? "$" + p : "";
       }));
@@ -41,0 +42,0 @@ }

package.json

 {
   "name": "@babel/runtime",
-  "version": "7.26.9",
+  "version": "7.26.10",
   "description": "babel's modular runtime helpers",
@@ -5,0 +5,0 @@ "license": "MIT",

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

248571

0.06%

Lines of code

5403

0.04%

Worsened metrics

Number of low supply chain risk alerts

2

Infinity%

No dependency changes