@expo/config - npm Package Compare versions

Comparing version 55.0.6 to 55.0.7

build/Config.js

@@ -315,8 +315,13 @@ "use strict";
 }
+const DYNAMIC_CONFIG_EXTS = ['.ts', '.mts', '.cts', '.mjs', '.cjs', '.js'];
 function getDynamicConfigFilePath(projectRoot) {
-  for (const fileName of ['app.config.ts', 'app.config.js']) {
+  const fileNames = DYNAMIC_CONFIG_EXTS.map(ext => `app.config${ext}`);
+  for (const fileName of fileNames) {
     const configPath = _path().default.join(projectRoot, fileName);
-    if (_fs().default.existsSync(configPath)) {
-      return configPath;
-    }
+    try {
+      const stat = _fs().default.statSync(configPath);
+      if (stat.isFile()) {
+        return configPath;
+      }
+    } catch {}
   }
@@ -328,5 +333,8 @@ return null;
     const configPath = _path().default.join(projectRoot, fileName);
-    if (_fs().default.existsSync(configPath)) {
-      return configPath;
-    }
+    try {
+      const stat = _fs().default.statSync(configPath);
+      if (stat.isFile()) {
+        return configPath;
+      }
+    } catch {}
   }
@@ -333,0 +341,0 @@ return null;

package.json

 {
   "name": "@expo/config",
-  "version": "55.0.6",
+  "version": "55.0.7",
   "description": "A library for interacting with the app.json",
@@ -39,3 +39,3 @@ "main": "build/index.js",
     "@expo/json-file": "^10.0.12",
-    "@expo/require-utils": "^55.0.0",
+    "@expo/require-utils": "^55.0.1",
     "deepmerge": "^4.3.1",
@@ -56,3 +56,3 @@ "getenv": "^2.0.0",
   },
-  "gitHead": "aeb65063e482533ed1119f736555bcca5af2af94"
+  "gitHead": "22e2ad4afba05b91f833f8cf07a36637748a1f70"
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

157428

0.57%

Lines of code

1861

0.43%

Dependency changes

• Updated

  @expo/require-utils@^55.0.1