@babel/traverse - npm Package Compare versions

Comparing version 7.27.7 to 7.28.0

lib/scope/index.js

@@ -10,6 +10,7 @@ "use strict";
 var _binding = require("./binding.js");
-var _globals = require("globals");
 var _t = require("@babel/types");
 var t = _t;
 var _cache = require("../cache.js");
+const globalsBuiltinLower = require("@babel/helper-globals/data/builtin-lower.json"),
+  globalsBuiltinUpper = require("@babel/helper-globals/data/builtin-upper.json");
 const {
@@ -959,3 +960,3 @@ assignmentExpression,
 exports.default = Scope;
-Scope.globals = Object.keys(_globals.builtin);
+Scope.globals = [...globalsBuiltinLower, ...globalsBuiltinUpper];
 Scope.contextVariables = ["arguments", "undefined", "Infinity", "NaN"];
@@ -962,0 +963,0 @@ {

lib/visitors.js

@@ -107,3 +107,3 @@ "use strict";
     if (!TYPES.includes(nodeType)) {
-      throw new Error(`You gave us a visitor for the node type ${nodeType} but it's not a valid type in @babel/traverse ${"7.27.7"}`);
+      throw new Error(`You gave us a visitor for the node type ${nodeType} but it's not a valid type in @babel/traverse ${"7.28.0"}`);
     }
@@ -110,0 +110,0 @@ const visitors = visitor[nodeType];

package.json

 {
   "name": "@babel/traverse",
-  "version": "7.27.7",
+  "version": "7.28.0",
   "description": "The Babel Traverse module maintains the overall tree state, and is responsible for replacing, removing, and adding nodes",
@@ -20,11 +20,11 @@ "author": "The Babel Team (https://babel.dev/team)",
     "@babel/code-frame": "^7.27.1",
-    "@babel/generator": "^7.27.5",
-    "@babel/parser": "^7.27.7",
+    "@babel/generator": "^7.28.0",
+    "@babel/helper-globals": "^7.28.0",
+    "@babel/parser": "^7.28.0",
     "@babel/template": "^7.27.2",
-    "@babel/types": "^7.27.7",
-    "debug": "^4.3.1",
-    "globals": "^11.1.0"
+    "@babel/types": "^7.28.0",
+    "debug": "^4.3.1"
   },
   "devDependencies": {
-    "@babel/core": "^7.27.7",
+    "@babel/core": "^7.28.0",
     "@babel/helper-plugin-test-runner": "^7.27.1"
@@ -31,0 +31,0 @@ },

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

693856

0.12%

Lines of code

5808

0.02%

Worsened metrics

Number of low supply chain risk alerts

3

200%

Dependency changes

• + Added

  @babel/helper-globals@^7.28.0

• + Added

  @babel/helper-globals@7.28.0
  (transitive)

• - Removed

  globals@^11.1.0

• - Removed

  globals@11.12.0
  (transitive)

• Updated

  @babel/generator@^7.28.0

• Updated

  @babel/parser@^7.28.0

• Updated

  @babel/types@^7.28.0