@rollup/wasm-node - npm Package Compare versions

Comparing version 4.60.0 to 4.60.1

dist/es/getLogFilter.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/parseAst.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/rollup.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/getLogFilter.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/parseAst.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/rollup.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/fsevents-importer.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch-cli.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch.js

 /*
   @license
-	Rollup.js v4.60.0
-	Sun, 22 Mar 2026 06:57:22 GMT - commit 6ecd69fb2ce736c8aabb50829edd227d1792c957
+	Rollup.js v4.60.1
+	Mon, 30 Mar 2026 04:32:12 GMT - commit ae871d762f6bbeb4320d28fe179211168f27a434
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

package.json

 {
   "name": "@rollup/wasm-node",
-  "version": "4.60.0",
+  "version": "4.60.1",
   "description": "Next-generation ES module bundler with Node wasm",
@@ -64,3 +64,3 @@ "main": "dist/rollup.js",
     "@types/yargs-parser": "^21.0.3",
-    "@vue/language-server": "^3.2.5",
+    "@vue/language-server": "^3.2.6",
     "acorn": "^8.16.0",
@@ -94,3 +94,3 @@ "acorn-import-assertions": "^1.9.0",
     "magic-string": "^0.30.21",
-    "memfs": "^4.56.11",
+    "memfs": "^4.57.1",
     "mocha": "11.7.5",
@@ -102,3 +102,3 @@ "nodemon": "^3.1.14",
     "picocolors": "^1.1.1",
-    "picomatch": "^4.0.3",
+    "picomatch": "^4.0.4",
     "pinia": "^3.0.4",
@@ -110,3 +110,3 @@ "prettier": "^3.8.1",
     "requirejs": "^2.3.8",
-    "rollup": "^4.59.0",
+    "rollup": "^4.60.0",
     "rollup-plugin-license": "^3.7.0",
@@ -122,3 +122,3 @@ "semver": "^7.7.4",
     "typescript": "^5.9.3",
-    "typescript-eslint": "^8.57.1",
+    "typescript-eslint": "^8.57.2",
     "vite": "^7.3.1",
@@ -128,3 +128,3 @@ "vitepress": "^1.6.4",
     "vue-eslint-parser": "^10.4.0",
-    "vue-tsc": "^3.2.5",
+    "vue-tsc": "^3.2.6",
     "wasm-pack": "^0.14.0",
@@ -131,0 +131,0 @@ "yargs-parser": "^21.1.1"

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3370573

1.38%

Lines of code

70795

2.21%

Worsened metrics

Number of low supply chain risk alerts

373

1.08%

No dependency changes