@code-inspector/core - npm Package Compare versions

Comparing version 1.2.2 to 1.2.3-beta.1

package.json

 {
   "name": "@code-inspector/core",
-  "version": "1.2.2",
+  "version": "1.2.3-beta.1",
   "main": "dist/index.js",
@@ -5,0 +5,0 @@ "module": "./dist/index.mjs",

types/shared/type.d.ts

@@ -16,2 +16,3 @@ import type { Editor } from 'launch-ide';
     envDir?: string;
+    root?: string;
 };
@@ -160,3 +161,12 @@ export type IDEOpenMethod = 'reuse' | 'new' | 'auto';
     pathType?: PathType;
+    /**
+     * @zh 要跳过注入的代码片段：
+     * - console: 跳过注入 console.error 和 console.warn 的代码片段，nextjs 和 nuxt 项目不建议跳过此项
+     * - htmlScript: 跳过在 html 中注入 script 标签的代码片段，MPA 项目不建议跳过此项
+     * @en The code snippets to skip injecting
+     * - console: Skip injecting the code snippet that injects console.error and console.warn, it is not recommended to skip this item for nextjs and nuxt projects
+     * - htmlScript: Skip injecting the code snippet that injects script tags in html, it is not recommended to skip this item for MPA projects
+     */
+    skipSnippets?: ('console' | 'htmlScript')[];
 };
 export {};

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12188273

0.01%

Lines of code

2679

0.37%

Worsened metrics

Number of low quality alerts

2

100%

Number of low supply chain risk alerts

18

12.5%

No dependency changes