@bifravst/aws-cdk-lambda-helpers - npm Package Compare versions

Comparing version 3.5.139 to 4.0.1

dist/src/findDependencies.d.ts

@@ -6,7 +6,7 @@ /**
     sourceFilePath: string;
-    imports?: string[];
-    visited?: string[];
-    packages?: Set<string>;
-    tsConfigFilePath?: string;
-    importsSubpathPatterns?: Record<string, string>;
+    imports?: string[] | undefined;
+    visited?: string[] | undefined;
+    packages?: Set<string> | undefined;
+    tsConfigFilePath?: string | undefined;
+    importsSubpathPatterns?: Record<string, string> | undefined;
 }) => {
@@ -13,0 +13,0 @@ dependencies: string[];

dist/src/findDependencies.js

@@ -77,8 +77,4 @@ import { readFileSync, statSync } from 'node:fs';
             if (moduleSpecifier === key) {
-                const fullResolvedPath = path.join(path.parse(tsConfigFilePath).dir, tsConfig.compilerOptions.baseUrl, resolvedPath);
-                importsSubpathPatterns[key] = [
-                    tsConfig.compilerOptions.baseUrl,
-                    path.sep,
-                    resolvedPath
-                ].join('');
+                const fullResolvedPath = path.join(path.parse(tsConfigFilePath).dir, resolvedPath);
+                importsSubpathPatterns[key] = resolvedPath;
                 return {
@@ -93,9 +89,5 @@ resolvedPath: fullResolvedPath
             if (maybeMatch?.groups?.wildcard === undefined) continue;
-            importsSubpathPatterns[key] = [
-                tsConfig.compilerOptions.baseUrl,
-                path.sep,
-                resolvedPath
-            ].join('');
+            importsSubpathPatterns[key] = resolvedPath;
             return {
-                resolvedPath: path.resolve(path.parse(tsConfigFilePath).dir, tsConfig.compilerOptions.baseUrl, resolvedPath.replace('*', maybeMatch.groups.wildcard))
+                resolvedPath: path.resolve(path.parse(tsConfigFilePath).dir, resolvedPath.replace('*', maybeMatch.groups.wildcard))
             };
@@ -102,0 +94,0 @@ }

dist/src/PackedLambdaFn.js

@@ -30,3 +30,3 @@ import { Permissions as SettingsPermissions } from '@bifravst/aws-ssm-settings-helpers/cdk';
             architecture: architecture ?? Lambda.Architecture.ARM_64,
-            runtime: props.runtime ?? Lambda.Runtime.NODEJS_22_X,
+            runtime: props.runtime ?? Lambda.Runtime.NODEJS_24_X,
             timeout: Duration.seconds(5),
@@ -33,0 +33,0 @@ memorySize: 1792,

dist/src/packLambda.d.ts

@@ -16,5 +16,5 @@ export type PackedLambda = {
      */
-    tsConfigFilePath?: string;
-    debug?: (label: string, info: string) => void;
-    progress?: (label: string, info: string) => void;
+    tsConfigFilePath?: string | undefined;
+    debug?: ((label: string, info: string) => void) | undefined;
+    progress?: ((label: string, info: string) => void) | undefined;
 }) => Promise<{
@@ -21,0 +21,0 @@ handler: string;

dist/src/packLambdaFromPath.d.ts

@@ -5,17 +5,17 @@ import { type PackedLambda } from './packLambda.ts';
     sourceFilePath: string;
-    handlerFunction?: string;
+    handlerFunction?: string | undefined;
     /**
      * @default process.cwd()
      */
-    baseDir?: string;
+    baseDir?: string | undefined;
     /**
      * @default ${baseDir}/dist/lambdas
      */
-    distDir?: string;
+    distDir?: string | undefined;
     /**
      * Pass the path to the tsconfig.json file if you want to use paths from the tsconfig.json file.
      */
-    tsConfigFilePath?: string;
-    debug?: (label: string, info: string) => void;
-    progress?: (label: string, info: string) => void;
+    tsConfigFilePath?: string | undefined;
+    debug?: ((label: string, info: string) => void) | undefined;
+    progress?: ((label: string, info: string) => void) | undefined;
 }) => Promise<PackedLambda>;

dist/src/packLayer.d.ts

@@ -11,14 +11,14 @@ export type PackedLayer = {
      */
-    baseDir?: string;
+    baseDir?: string | undefined;
     /**
      * @default ${baseDir}/dist/layers
      */
-    distDir?: string;
+    distDir?: string | undefined;
     /**
      * Returns the command to run, the first element is the command (e.g. `npm`) and the rest are its arguments.
      */
-    installCommand?: (args: {
+    installCommand?: ((args: {
         packageFilePath: string;
         packageLockFilePath: string;
-    }) => [string, ...Array<string>];
+    }) => [string, ...string[]]) | undefined;
 }) => Promise<PackedLayer>;

dist/src/packLayer.js

 import { spawn } from 'child_process';
 import { createWriteStream } from 'fs';
 import { copyFile, mkdir, readFile, rm, stat, writeFile } from 'fs/promises';
-import { glob } from 'glob';
+import { glob } from 'node:fs/promises';
 import { fileURLToPath } from 'node:url';
@@ -87,10 +87,11 @@ import path from 'path';
     });
-    const filesToAdd = await glob(`**`, {
-        cwd: layerDir,
-        nodir: true
-    });
     const zipfile = new ZipFile();
-    filesToAdd.forEach((f)=>{
+    for await (const f of glob(`**`, {
+        cwd: layerDir
+    })){
+        if ((await stat(path.join(layerDir, f))).isDirectory()) {
+            continue;
+        }
         zipfile.addFile(path.join(layerDir, f), f);
-    });
+    }
     if (hasNpmRcFile) {
@@ -97,0 +98,0 @@ zipfile.addFile(path.join(nodejsDir, '.npmrc'), 'nodejs/.npmrc');

dist/src/updateLambdaCode.d.ts

@@ -7,2 +7,2 @@ import { type CloudFormationClient } from '@aws-sdk/client-cloudformation';
     lambda: LambdaClient;
-}) => (stackName: string, packedLambdas: Record<string, PackedLambda>, debug?: (...args: Array<any>) => void) => Promise<void>;
+}) => (stackName: string, packedLambdas: Record<string, PackedLambda>, debug?: ((...args: any[]) => void) | undefined) => Promise<void>;

package.json

 {
   "name": "@bifravst/aws-cdk-lambda-helpers",
-  "version": "3.5.139",
+  "version": "4.0.1",
   "description": "Helper functions which simplify working with TypeScript lambdas for AWS CDK.",
@@ -37,3 +37,3 @@ "exports": {
     "prepare": "husky",
-    "prepublishOnly": "node --experimental-strip-types npm-compile.ts && npx tsc -P tsconfig.npm.json --outDir ./dist/src"
+    "prepublishOnly": "node --experimental-strip-types npm-compile.ts && npx tsgo -P tsconfig.npm.json --outDir ./dist/src"
   },
@@ -57,4 +57,4 @@ "repository": {
   "devDependencies": {
-    "@aws-sdk/client-cloudformation": "3.946.0",
-    "@aws-sdk/client-dynamodb": "3.946.0",
+    "@aws-sdk/client-cloudformation": "3.962.0",
+    "@aws-sdk/client-dynamodb": "3.962.0",
     "@bifravst/cloudformation-helpers": "9.1.1",
@@ -64,10 +64,11 @@ "@bifravst/eslint-config-typescript": "6.4.4",
     "@bifravst/prettier-config": "1.1.17",
-    "@commitlint/config-conventional": "19.8.1",
+    "@commitlint/config-conventional": "20.3.0",
     "@swc/cli": "0.7.9",
     "@types/aws-lambda": "8.10.159",
-    "@types/node": "24.9.1",
+    "@types/node": "25.0.3",
     "@types/unzip-stream": "0.3.4",
     "@types/yazl": "3.3.0",
-    "cdk": "2.1033.0",
-    "commitlint": "19.8.1",
+    "@typescript/native-preview": "7.0.0-dev.20260105.1",
+    "cdk": "2.1100.1",
+    "commitlint": "20.3.0",
     "husky": "9.1.7",
@@ -119,6 +120,5 @@ "id128": "1.6.6",
   "dependencies": {
-    "@swc/core": "1.15.3",
+    "@swc/core": "1.15.8",
     "fp-ts": "2.16.11",
-    "glob": "11.1.0",
-    "p-retry": "7.1.0",
+    "p-retry": "7.1.1",
     "typescript": "5.9.3",
@@ -128,7 +128,7 @@ "yazl": "3.3.1"
   "peerDependencies": {
-    "@aws-sdk/client-lambda": "^3.946.0",
+    "@aws-sdk/client-lambda": "^3.962.0",
     "@bifravst/aws-ssm-settings-helpers": "^1.2.257",
-    "aws-cdk-lib": "^2.232.1",
-    "constructs": "^10.4.3"
+    "aws-cdk-lib": "^2.233.0",
+    "constructs": "^10.4.4"
   }
 }

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Dependency count

9

-10%

Worsened metrics

Total package byte prevSize

47341

-0.02%

Dev dependency count

19

5.56%

Lines of code

986

-0.7%

Dependency changes

• + Added

  @aws-cdk/cloud-assembly-schema@50.4.0
  (transitive)

• + Added

  @bifravst/aws-ssm-settings-helpers@1.2.286
  (transitive)

• + Added

  @swc/core@1.15.8
  (transitive)

• + Added

  @swc/core-darwin-arm64@1.15.8
  (transitive)

• + Added

  @swc/core-darwin-x64@1.15.8
  (transitive)

• + Added

  @swc/core-linux-arm-gnueabihf@1.15.8
  (transitive)

• + Added

  @swc/core-linux-arm64-gnu@1.15.8
  (transitive)

• + Added

  @swc/core-linux-arm64-musl@1.15.8
  (transitive)

• + Added

  @swc/core-linux-x64-gnu@1.15.8
  (transitive)

• + Added

  @swc/core-linux-x64-musl@1.15.8
  (transitive)

• + Added

  @swc/core-win32-arm64-msvc@1.15.8
  (transitive)

• + Added

  @swc/core-win32-ia32-msvc@1.15.8
  (transitive)

• + Added

  @swc/core-win32-x64-msvc@1.15.8
  (transitive)

• + Added

  aws-cdk-lib@2.239.0
  (transitive)

• + Added

  p-retry@7.1.1
  (transitive)

• - Removed

  glob@11.1.0

• - Removed

  @aws-cdk/cloud-assembly-schema@52.2.0
  (transitive)

• - Removed

  @bifravst/aws-ssm-settings-helpers@1.2.287
  (transitive)

• - Removed

  @isaacs/cliui@9.0.0
  (transitive)

• - Removed

  @swc/core@1.15.3
  (transitive)

• - Removed

  @swc/core-darwin-arm64@1.15.3
  (transitive)

• - Removed

  @swc/core-darwin-x64@1.15.3
  (transitive)

• - Removed

  @swc/core-linux-arm-gnueabihf@1.15.3
  (transitive)

• - Removed

  @swc/core-linux-arm64-gnu@1.15.3
  (transitive)

• - Removed

  @swc/core-linux-arm64-musl@1.15.3
  (transitive)

• - Removed

  @swc/core-linux-x64-gnu@1.15.3
  (transitive)

• - Removed

  @swc/core-linux-x64-musl@1.15.3
  (transitive)

• - Removed

  @swc/core-win32-arm64-msvc@1.15.3
  (transitive)

• - Removed

  @swc/core-win32-ia32-msvc@1.15.3
  (transitive)

• - Removed

  @swc/core-win32-x64-msvc@1.15.3
  (transitive)

• - Removed

  aws-cdk-lib@2.241.0
  (transitive)

• - Removed

  balanced-match@4.0.4
  (transitive)

• - Removed

  brace-expansion@5.0.4
  (transitive)

• - Removed

  cross-spawn@7.0.6
  (transitive)

• - Removed

  foreground-child@3.3.1
  (transitive)

• - Removed

  glob@11.1.0
  (transitive)

• - Removed

  isexe@2.0.0
  (transitive)

• - Removed

  jackspeak@4.2.3
  (transitive)

• - Removed

  lru-cache@11.2.6
  (transitive)

• - Removed

  minimatch@10.2.4
  (transitive)

• - Removed

  minipass@7.1.3
  (transitive)

• - Removed

  p-retry@7.1.0
  (transitive)

• - Removed

  package-json-from-dist@1.0.1
  (transitive)

• - Removed

  path-key@3.1.1
  (transitive)

• - Removed

  path-scurry@2.0.2
  (transitive)

• - Removed

  shebang-command@2.0.0
  (transitive)

• - Removed

  shebang-regex@3.0.0
  (transitive)

• - Removed

  signal-exit@4.1.0
  (transitive)

• - Removed

  which@2.0.2
  (transitive)

• Updated

  @swc/core@1.15.8

• Updated

  p-retry@7.1.1