@esbuild/android-arm - npm Package Compare versions

Comparing version 0.26.0 to 0.27.0

package.json

 {
   "name": "@esbuild/android-arm",
-  "version": "0.26.0",
+  "version": "0.27.0",
   "description": "A WebAssembly shim for esbuild on Android ARM.",
@@ -5,0 +5,0 @@ "repository": {

wasm_exec_node.js

@@ -14,2 +14,3 @@ // Copyright 2021 The Go Authors. All rights reserved.
 globalThis.fs = require("fs");
+globalThis.path = require("path");
 globalThis.TextEncoder = require("util").TextEncoder;
@@ -16,0 +17,0 @@ globalThis.TextDecoder = require("util").TextDecoder;

wasm_exec.js

@@ -17,3 +17,3 @@ // Copyright 2018 The Go Authors. All rights reserved.
 		globalThis.fs = {
-			constants: { O_WRONLY: -1, O_RDWR: -1, O_CREAT: -1, O_TRUNC: -1, O_APPEND: -1, O_EXCL: -1 }, // unused
+			constants: { O_WRONLY: -1, O_RDWR: -1, O_CREAT: -1, O_TRUNC: -1, O_APPEND: -1, O_EXCL: -1, O_DIRECTORY: -1 }, // unused
 			writeSync(fd, buf) {
@@ -77,2 +77,10 @@ outputBuf += decoder.decode(buf);
 
+	if (!globalThis.path) {
+		globalThis.path = {
+			resolve(...pathSegments) {
+				return pathSegments.join("/");
+			}
+		}
+	}
+
 	if (!globalThis.crypto) {
@@ -213,2 +221,7 @@ throw new Error("globalThis.crypto is not available, polyfill required (crypto.getRandomValues only)");
 
+			const testCallExport = (a, b) => {
+				this._inst.exports.testExport0();
+				return this._inst.exports.testExport(a, b);
+			}
+
 			const timeOrigin = Date.now() - performance.now();
@@ -218,2 +231,3 @@ this.importObject = {
 					add: (a, b) => a + b,
+					callExport: testCallExport,
 				},
@@ -220,0 +234,0 @@ gojs: {

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

13510547

9.36%

Lines of code

547

2.43%

No dependency changes