@eslint/config-array - npm Package Compare versions

Comparing version 0.21.1 to 0.21.2

dist/cjs/std__path/posix.cjs

@@ -954,3 +954,3 @@ // @ts-nocheck
     // Terminates with `i` at the non-inclusive end of the current segment.
-    for(; i < glob.length && !c.seps.includes(glob[i]); i++){
+    for(; i < glob.length && !(c.seps.includes(glob[i]) && groupStack.length === 0); i++){
       if (inEscape) {
@@ -1228,3 +1228,3 @@ inEscape = false;
   };
-  const regex = /\\(.)|(^!|\*|\?|[\].+)]\?|\[[^[\\\]]+\]|\{[^{\\}]+\}|\(\?[:!=][^\\)]+\)|\([^(|]+\|[^\\)]+\))/;
+  const regex = /\\(.)|(^!|\*|\?|[\].+)]\?|\[[^[\\\]]+\]|\{[^{\\}]+\}|\(\?[:!=][^\\)]+\)|\([^(|]+\|[^\\)]+\)|@\([^)]+\))/;
   if (str === "") {
@@ -1231,0 +1231,0 @@ return false;

dist/cjs/std__path/windows.cjs

@@ -1004,3 +1004,3 @@ // @ts-nocheck
  *
- * An example in windws, for instance:
+ * An example in windows, for instance:
  *  from = 'C:\\orandea\\test\\aaa'
@@ -1295,3 +1295,3 @@ *  to = 'C:\\orandea\\impl\\bbb'
     // Terminates with `i` at the non-inclusive end of the current segment.
-    for(; i < glob.length && !c.seps.includes(glob[i]); i++){
+    for(; i < glob.length && !(c.seps.includes(glob[i]) && groupStack.length === 0); i++){
       if (inEscape) {
@@ -1570,3 +1570,3 @@ inEscape = false;
   };
-  const regex = /\\(.)|(^!|\*|\?|[\].+)]\?|\[[^[\\\]]+\]|\{[^{\\}]+\}|\(\?[:!=][^\\)]+\)|\([^(|]+\|[^\\)]+\))/;
+  const regex = /\\(.)|(^!|\*|\?|[\].+)]\?|\[[^[\\\]]+\]|\{[^{\\}]+\}|\(\?[:!=][^\\)]+\)|\([^(|]+\|[^\\)]+\)|@\([^)]+\))/;
   if (str === "") {
@@ -1573,0 +1573,0 @@ return false;

dist/esm/std__path/posix.js

@@ -952,3 +952,3 @@ // @ts-nocheck
     // Terminates with `i` at the non-inclusive end of the current segment.
-    for(; i < glob.length && !c.seps.includes(glob[i]); i++){
+    for(; i < glob.length && !(c.seps.includes(glob[i]) && groupStack.length === 0); i++){
       if (inEscape) {
@@ -1226,3 +1226,3 @@ inEscape = false;
   };
-  const regex = /\\(.)|(^!|\*|\?|[\].+)]\?|\[[^[\\\]]+\]|\{[^{\\}]+\}|\(\?[:!=][^\\)]+\)|\([^(|]+\|[^\\)]+\))/;
+  const regex = /\\(.)|(^!|\*|\?|[\].+)]\?|\[[^[\\\]]+\]|\{[^{\\}]+\}|\(\?[:!=][^\\)]+\)|\([^(|]+\|[^\\)]+\)|@\([^)]+\))/;
   if (str === "") {
@@ -1229,0 +1229,0 @@ return false;

dist/esm/std__path/windows.js

@@ -1002,3 +1002,3 @@ // @ts-nocheck
  *
- * An example in windws, for instance:
+ * An example in windows, for instance:
  *  from = 'C:\\orandea\\test\\aaa'
@@ -1293,3 +1293,3 @@ *  to = 'C:\\orandea\\impl\\bbb'
     // Terminates with `i` at the non-inclusive end of the current segment.
-    for(; i < glob.length && !c.seps.includes(glob[i]); i++){
+    for(; i < glob.length && !(c.seps.includes(glob[i]) && groupStack.length === 0); i++){
       if (inEscape) {
@@ -1568,3 +1568,3 @@ inEscape = false;
   };
-  const regex = /\\(.)|(^!|\*|\?|[\].+)]\?|\[[^[\\\]]+\]|\{[^{\\}]+\}|\(\?[:!=][^\\)]+\)|\([^(|]+\|[^\\)]+\))/;
+  const regex = /\\(.)|(^!|\*|\?|[\].+)]\?|\[[^[\\\]]+\]|\{[^{\\}]+\}|\(\?[:!=][^\\)]+\)|\([^(|]+\|[^\\)]+\)|@\([^)]+\))/;
   if (str === "") {
@@ -1571,0 +1571,0 @@ return false;

package.json

 {
   "name": "@eslint/config-array",
-  "version": "0.21.1",
+  "version": "0.21.2",
   "description": "General purpose glob-based configuration matching.",
@@ -54,3 +54,3 @@ "author": "Nicholas C. Zakas",
     "debug": "^4.3.1",
-    "minimatch": "^3.1.2"
+    "minimatch": "^3.1.5"
   },
@@ -57,0 +57,0 @@ "devDependencies": {

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

326203

0.05%

Dependency changes

• Updated

  minimatch@^3.1.5