@rollup/wasm-node - npm Package Compare versions

Comparing version 4.53.3 to 4.53.4

dist/es/getLogFilter.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/parseAst.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/rollup.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/getLogFilter.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/parseAst.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/rollup.d.ts

@@ -565,3 +565,4 @@ import type * as estree from 'estree';
 export interface OutputPlugin
-	extends Partial<{ [K in OutputPluginHooks]: PluginHooks[K] }>,
+	extends
+		Partial<{ [K in OutputPluginHooks]: PluginHooks[K] }>,
 		Partial<Record<AddonHooks, ObjectHook<AddonHook>>> {
@@ -622,4 +623,5 @@ cacheKey?: string | undefined;
 
-export interface TreeshakingOptions
-	extends Partial<Omit<NormalizedTreeshakingOptions, 'moduleSideEffects'>> {
+export interface TreeshakingOptions extends Partial<
+	Omit<NormalizedTreeshakingOptions, 'moduleSideEffects'>
+> {
 	moduleSideEffects?: ModuleSideEffectsOption | undefined;
@@ -626,0 +628,0 @@ preset?: TreeshakingPreset | undefined;

dist/rollup.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/fsevents-importer.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch-cli.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch.js

 /*
   @license
-	Rollup.js v4.53.3
-	Wed, 19 Nov 2025 06:31:27 GMT - commit 998b5950a6ea7cea1a7b994e8dab45472c3cbe7e
+	Rollup.js v4.53.4
+	Mon, 15 Dec 2025 12:00:59 GMT - commit 7df7947fdb51ead87b71d38ece3752796bd0249c
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/wasm-node/bindings_wasm.js

@@ -5,32 +5,2 @@
 
-let cachedUint8ArrayMemory0 = null;
-
-function getUint8ArrayMemory0() {
-    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
-        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
-    }
-    return cachedUint8ArrayMemory0;
-}
-
-let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
-
-cachedTextDecoder.decode();
-
-function decodeText(ptr, len) {
-    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
-}
-
-function getStringFromWasm0(ptr, len) {
-    ptr = ptr >>> 0;
-    return decodeText(ptr, len);
-}
-
-let heap = new Array(128).fill(undefined);
-
-heap.push(undefined, null, true, false);
-
-function getObject(idx) { return heap[idx]; }
-
-let heap_next = heap.length;
-
 function addHeapObject(obj) {
@@ -45,2 +15,8 @@ if (heap_next === heap.length) heap.push(heap.length + 1);
 
+function dropObject(idx) {
+    if (idx < 132) return;
+    heap[idx] = heap_next;
+    heap_next = idx;
+}
+
 function getArrayU8FromWasm0(ptr, len) {
@@ -51,19 +27,31 @@ ptr = ptr >>> 0;
 
-let WASM_VECTOR_LEN = 0;
+let cachedDataViewMemory0 = null;
+function getDataViewMemory0() {
+    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
+        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
+    }
+    return cachedDataViewMemory0;
+}
 
-const cachedTextEncoder = new TextEncoder();
+function getStringFromWasm0(ptr, len) {
+    ptr = ptr >>> 0;
+    return decodeText(ptr, len);
+}
 
-if (!('encodeInto' in cachedTextEncoder)) {
-    cachedTextEncoder.encodeInto = function (arg, view) {
-        const buf = cachedTextEncoder.encode(arg);
-        view.set(buf);
-        return {
-            read: arg.length,
-            written: buf.length
-        };
+let cachedUint8ArrayMemory0 = null;
+function getUint8ArrayMemory0() {
+    if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) {
+        cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
     }
+    return cachedUint8ArrayMemory0;
 }
 
+function getObject(idx) { return heap[idx]; }
+
+let heap = new Array(128).fill(undefined);
+heap.push(undefined, null, true, false);
+
+let heap_next = heap.length;
+
 function passStringToWasm0(arg, malloc, realloc) {
-
     if (realloc === undefined) {
@@ -89,3 +77,2 @@ const buf = cachedTextEncoder.encode(arg);
     }
-
     if (offset !== len) {
@@ -107,22 +94,29 @@ if (offset !== 0) {
 
-let cachedDataViewMemory0 = null;
+function takeObject(idx) {
+    const ret = getObject(idx);
+    dropObject(idx);
+    return ret;
+}
 
-function getDataViewMemory0() {
-    if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || (cachedDataViewMemory0.buffer.detached === undefined && cachedDataViewMemory0.buffer !== wasm.memory.buffer)) {
-        cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
-    }
-    return cachedDataViewMemory0;
+let cachedTextDecoder = new TextDecoder('utf-8', { ignoreBOM: true, fatal: true });
+cachedTextDecoder.decode();
+function decodeText(ptr, len) {
+    return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
 }
 
-function dropObject(idx) {
-    if (idx < 132) return;
-    heap[idx] = heap_next;
-    heap_next = idx;
+const cachedTextEncoder = new TextEncoder();
+
+if (!('encodeInto' in cachedTextEncoder)) {
+    cachedTextEncoder.encodeInto = function (arg, view) {
+        const buf = cachedTextEncoder.encode(arg);
+        view.set(buf);
+        return {
+            read: arg.length,
+            written: buf.length
+        };
+    }
 }
 
-function takeObject(idx) {
-    const ret = getObject(idx);
-    dropObject(idx);
-    return ret;
-}
+let WASM_VECTOR_LEN = 0;
+
 /**
@@ -134,3 +128,3 @@ * @param {string} code
  */
-exports.parse = function(code, allow_return_outside_function, jsx) {
+function parse(code, allow_return_outside_function, jsx) {
     try {
@@ -149,3 +143,4 @@ const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
     }
-};
+}
+exports.parse = parse;
 
@@ -156,3 +151,3 @@ /**
  */
-exports.xxhashBase64Url = function(input) {
+function xxhashBase16(input) {
     let deferred1_0;
@@ -162,3 +157,3 @@ let deferred1_1;
         const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-        wasm.xxhashBase64Url(retptr, addHeapObject(input));
+        wasm.xxhashBase16(retptr, addHeapObject(input));
         var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
@@ -173,3 +168,4 @@ var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
     }
-};
+}
+exports.xxhashBase16 = xxhashBase16;
 
@@ -180,3 +176,3 @@ /**
  */
-exports.xxhashBase36 = function(input) {
+function xxhashBase36(input) {
     let deferred1_0;
@@ -196,3 +192,4 @@ let deferred1_1;
     }
-};
+}
+exports.xxhashBase36 = xxhashBase36;
 
@@ -203,3 +200,3 @@ /**
  */
-exports.xxhashBase16 = function(input) {
+function xxhashBase64Url(input) {
     let deferred1_0;
@@ -209,3 +206,3 @@ let deferred1_1;
         const retptr = wasm.__wbindgen_add_to_stack_pointer(-16);
-        wasm.xxhashBase16(retptr, addHeapObject(input));
+        wasm.xxhashBase64Url(retptr, addHeapObject(input));
         var r0 = getDataViewMemory0().getInt32(retptr + 4 * 0, true);
@@ -220,5 +217,6 @@ var r1 = getDataViewMemory0().getInt32(retptr + 4 * 1, true);
     }
-};
+}
+exports.xxhashBase64Url = xxhashBase64Url;
 
-exports.__wbg___wbindgen_throw_b855445ff6a94295 = function(arg0, arg1) {
+exports.__wbg___wbindgen_throw_dd24417ed36fc46e = function(arg0, arg1) {
     throw new Error(getStringFromWasm0(arg0, arg1));
@@ -239,3 +237,3 @@ };
 
-exports.__wbg_length_69bca3cb64fc8748 = function(arg0) {
+exports.__wbg_length_22ac23eaec9d8053 = function(arg0) {
     const ret = getObject(arg0).length;
@@ -250,3 +248,3 @@ return ret;
 
-exports.__wbg_prototypesetcall_2a6620b6922694b2 = function(arg0, arg1, arg2) {
+exports.__wbg_prototypesetcall_dfe9b766cdc1f1fd = function(arg0, arg1, arg2) {
     Uint8Array.prototype.set.call(getArrayU8FromWasm0(arg0, arg1), getObject(arg2));
@@ -271,2 +269,1 @@ };
 const wasm = exports.__wasm = new WebAssembly.Instance(wasmModule, imports).exports;
-

package.json

 {
   "name": "@rollup/wasm-node",
-  "version": "4.53.3",
+  "version": "4.53.4",
   "description": "Next-generation ES module bundler with Node wasm",
@@ -43,8 +43,8 @@ "main": "dist/rollup.js",
     "@codemirror/state": "^6.5.2",
-    "@codemirror/view": "^6.38.6",
+    "@codemirror/view": "^6.39.3",
     "@eslint/js": "^9.39.1",
-    "@inquirer/prompts": "^7.10.0",
+    "@inquirer/prompts": "^7.10.1",
     "@jridgewell/sourcemap-codec": "^1.5.5",
     "@mermaid-js/mermaid-cli": "^11.12.0",
-    "@napi-rs/cli": "^3.4.1",
+    "@napi-rs/cli": "3.4.1",
     "@rollup/plugin-alias": "^6.0.0",
@@ -59,9 +59,9 @@ "@rollup/plugin-buble": "^1.0.3",
     "@rollup/pluginutils": "^5.3.0",
-    "@shikijs/vitepress-twoslash": "^3.15.0",
+    "@shikijs/vitepress-twoslash": "^3.19.0",
     "@types/mocha": "^10.0.10",
-    "@types/node": "^20.19.25",
+    "@types/node": "^20.19.26",
     "@types/picomatch": "^4.0.2",
     "@types/semver": "^7.7.1",
     "@types/yargs-parser": "^21.0.3",
-    "@vue/language-server": "^3.1.3",
+    "@vue/language-server": "^3.1.8",
     "acorn": "^8.15.0",
@@ -83,3 +83,3 @@ "acorn-import-assertions": "^1.9.0",
     "eslint-plugin-unicorn": "^62.0.0",
-    "eslint-plugin-vue": "^10.5.1",
+    "eslint-plugin-vue": "^10.6.2",
     "fixturify": "^3.0.0",
@@ -92,6 +92,6 @@ "flru": "^1.0.2",
     "is-reference": "^3.0.3",
-    "lint-staged": "^16.2.6",
+    "lint-staged": "^16.2.7",
     "locate-character": "^3.0.0",
     "magic-string": "^0.30.21",
-    "memfs": "^4.50.0",
+    "memfs": "^4.51.1",
     "mocha": "^11.7.5",
@@ -105,8 +105,8 @@ "nodemon": "^3.1.11",
     "pinia": "^3.0.4",
-    "prettier": "^3.6.2",
+    "prettier": "^3.7.4",
     "prettier-plugin-organize-imports": "^4.3.0",
     "pretty-bytes": "^7.1.0",
     "pretty-ms": "^9.3.0",
-    "requirejs": "^2.3.7",
-    "rollup": "^4.53.2",
+    "requirejs": "^2.3.8",
+    "rollup": "^4.53.3",
     "rollup-plugin-license": "^3.6.0",
@@ -123,8 +123,8 @@ "rollup-plugin-string": "^3.0.0",
     "typescript": "^5.9.3",
-    "typescript-eslint": "^8.46.4",
-    "vite": "^7.2.2",
+    "typescript-eslint": "^8.49.0",
+    "vite": "^7.2.7",
     "vitepress": "^1.6.4",
-    "vue": "^3.5.24",
+    "vue": "^3.5.25",
     "vue-eslint-parser": "^10.2.0",
-    "vue-tsc": "^3.1.3",
+    "vue-tsc": "^3.1.8",
     "wasm-pack": "^0.13.1",
@@ -131,0 +131,0 @@ "yargs-parser": "^21.1.1"

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3327188

0.06%

Lines of code

68864

0.12%

No dependency changes