@cubejs-backend/shared - npm Package Compare versions

Comparing version 1.1.10 to 1.1.12

dist/src/env.js

@@ -754,2 +754,9 @@ "use strict";
     duckdbS3SessionToken: ({ dataSource }) => (process.env[keyByDataSource('CUBEJS_DB_DUCKDB_S3_SESSION_TOKEN', dataSource)]),
+    duckdbExtensions: ({ dataSource }) => {
+        const extensions = process.env[keyByDataSource('CUBEJS_DB_DUCKDB_EXTENSIONS', dataSource)];
+        if (extensions) {
+            return extensions.split(',').map(e => e.trim());
+        }
+        return [];
+    },
     /** ***************************************************************
@@ -756,0 +763,0 @@ * Presto Driver                                                  *

package.json

 {
   "name": "@cubejs-backend/shared",
-  "version": "1.1.10",
+  "version": "1.1.12",
   "description": "Shared code for Cube.js backend packages",
@@ -74,3 +74,3 @@ "main": "dist/src/index.js",
   },
-  "gitHead": "8ff2eca3b6424510c1fad8f30079031f6445110d"
+  "gitHead": "a7cf544285f99550fc8927b0321b6921e2384bbe"
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

207897

increased by0.27%

Lines of code

2668

increased by0.26%

Worsened metrics

Number of low supply chain risk alerts

119

increased by0.85%

No dependency changes