@rollup/wasm-node - npm Package Compare versions

Comparing version 4.54.0 to 4.55.0

dist/es/getLogFilter.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/parseAst.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/rollup.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/getLogFilter.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/parseAst.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/rollup.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/fsevents-importer.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch-cli.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch.js

 /*
   @license
-	Rollup.js v4.54.0
-	Sat, 20 Dec 2025 09:28:12 GMT - commit 88f1430c42fe76db421623106546e50627271952
+	Rollup.js v4.55.0
+	Mon, 05 Jan 2026 08:05:39 GMT - commit 570b7ee21ce3ca143bdfad918fcb31b1792d308f
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

package.json

 {
   "name": "@rollup/wasm-node",
-  "version": "4.54.0",
+  "version": "4.55.0",
   "description": "Next-generation ES module bundler with Node wasm",
@@ -38,8 +38,8 @@ "main": "dist/rollup.js",
   "devDependencies": {
-    "@codemirror/commands": "^6.10.0",
+    "@codemirror/commands": "^6.10.1",
     "@codemirror/lang-javascript": "^6.2.4",
-    "@codemirror/language": "^6.11.3",
+    "@codemirror/language": "^6.12.1",
     "@codemirror/search": "^6.5.11",
-    "@codemirror/state": "^6.5.2",
-    "@codemirror/view": "^6.39.4",
+    "@codemirror/state": "^6.5.3",
+    "@codemirror/view": "^6.39.8",
     "@eslint/js": "^9.39.2",
@@ -65,3 +65,3 @@ "@inquirer/prompts": "^7.10.1",
     "@types/yargs-parser": "^21.0.3",
-    "@vue/language-server": "^3.1.8",
+    "@vue/language-server": "^3.2.1",
     "acorn": "^8.15.0",
@@ -86,3 +86,3 @@ "acorn-import-assertions": "^1.9.0",
     "flru": "^1.0.2",
-    "fs-extra": "^11.3.2",
+    "fs-extra": "^11.3.3",
     "github-api": "^3.4.0",
@@ -109,5 +109,4 @@ "globals": "^16.5.0",
     "requirejs": "^2.3.8",
-    "rollup": "^4.53.4",
+    "rollup": "^4.54.0",
     "rollup-plugin-license": "^3.6.0",
-    "rollup-plugin-string": "^3.0.0",
     "semver": "^7.7.3",
@@ -122,8 +121,8 @@ "shx": "^0.4.0",
     "typescript": "^5.9.3",
-    "typescript-eslint": "^8.50.0",
+    "typescript-eslint": "^8.51.0",
     "vite": "^7.3.0",
     "vitepress": "^1.6.4",
-    "vue": "^3.5.25",
+    "vue": "^3.5.26",
     "vue-eslint-parser": "^10.2.0",
-    "vue-tsc": "^3.1.8",
+    "vue-tsc": "^3.2.1",
     "wasm-pack": "^0.13.1",
@@ -130,0 +129,0 @@ "yargs-parser": "^21.1.1"

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Unidentified License

License

Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Unidentified License

License

Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

87

-1.14%

Lines of code

69047

0.17%

Worsened metrics

Total package byte prevSize

3311331

-0.6%

No dependency changes