@hint/utils - npm Package Compare versions

Comparing version 7.0.16 to 7.0.17

dist/src/packages/load-resource.js

@@ -80,3 +80,3 @@ "use strict";
     if (process.env.webpack) {
-        pkgPath = eval(`require.resolve("${modulePath}")`);
+        pkgPath = __non_webpack_require__.resolve(modulePath);
     }
@@ -83,0 +83,0 @@ else {

dist/src/packages/require-package.js

@@ -7,3 +7,3 @@ "use strict";
     if (process.env.webpack) {
-        pkg = eval(`require("${modulePath}")`);
+        pkg = __non_webpack_require__(modulePath);
     }
@@ -10,0 +10,0 @@ else {

package.json

@@ -13,3 +13,3 @@ {
     "@hint/utils-debug": "^1.0.10",
-    "@hint/utils-fs": "^1.0.13",
+    "@hint/utils-fs": "^1.0.14",
     "@hint/utils-string": "^1.0.12",
@@ -30,3 +30,3 @@ "chalk": "^4.1.2",
   "devDependencies": {
-    "@hint/utils-dom": "^2.1.12",
+    "@hint/utils-dom": "^2.1.13",
     "@hint/utils-types": "^1.1.7",
@@ -93,3 +93,3 @@ "@types/configstore": "^5.0.1",
   },
-  "version": "7.0.16"
+  "version": "7.0.17"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

210042

increased by61.11%

Number of package files

113

increased by0.89%

Number of medium supply chain risk alerts

1

decreased by-66.67%

Dependency changes

• Updated@hint/utils-fs@^1.0.14