@dataform/core - npm Package Compare versions

Comparing version 3.0.35 to 3.0.36

configs.proto

@@ -65,2 +65,7 @@ // Copyright 2023 Google LLC
   DefaultIcebergConfig default_iceberg_config = 12;
+
+  // Optional. Disables all assertions including built-in assertions 
+  // (uniqueKey, nonNull, rowConditions) and manual assertions (type: assertion).
+  // When true, assertions will still be compiled but marked as disabled.
+  bool disable_assertions = 13;
 }
@@ -67,0 +72,0 @@

core.proto

@@ -19,2 +19,4 @@ // Copyright 2023 Google LLC
 
+import "protos/configs.proto";
+
 option java_package = "com.dataform.protos";
@@ -46,2 +48,4 @@ option java_outer_classname = "CoreMeta";
 
+  bool disable_assertions = 20;
+
   reserved 3, 4, 6, 8, 10, 12, 13;
@@ -63,2 +67,4 @@ }
 
+  Extension extension = 10;
+
   reserved 2, 4, 5, 7, 9;
@@ -407,1 +413,19 @@ }
 }
+
+// Execution mode of compilation extension.
+enum ExtensionCompilationMode {
+  // Unspecified compiled mode - extension will be skipped.
+  COMPILATION_MODE_UNSPECIFIED = 0;
+  // Execute before regular Dataform compilation.
+  PROLOGUE = 1;
+  // Replace regular Dataform compilation.
+  APPLICATION_CODE = 2;
+}
+
+message Extension {
+  // Name of the extension (JS module) to delegate the compilation to.
+  string name = 1;
+
+  // Compilation mode of the extension, required.
+  ExtensionCompilationMode compilation_mode = 2;
+}

package.json

@@ -37,3 +37,3 @@ {
     },
-    "version": "3.0.35",
+    "version": "3.0.36",
     "name": "@dataform/core",
@@ -40,0 +40,0 @@ "description": "Dataform core API.",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

956508

1.15%

Lines of code

7303

1.49%

No dependency changes