@secretlint/config-loader - npm Package Compare versions

Comparing version 5.2.0 to 5.2.1

lib/index.js

@@ -48,5 +48,2 @@ "use strict";
 };
-// FIXME: https://github.com/microsoft/TypeScript/issues/43329
-// module: node12 will be replace it
-const _importDynamic = new Function("modulePath", "return import(modulePath)");
 /**
@@ -89,3 +86,3 @@ * Load packages in RawConfig and return loaded config object
                 ? replacedDefinition.rule
-                : importSecretlintCreator(await _importDynamic(convertToFileUrl(moduleResolver.resolveRulePackageName(configDescriptorRule.id))));
+                : importSecretlintCreator(await import(convertToFileUrl(moduleResolver.resolveRulePackageName(configDescriptorRule.id))));
             if (isSecretLintCoreConfigRulePreset(ruleCreator)) {
@@ -198,3 +195,3 @@ const configDescriptorRulePreset = configDescriptorRule;
                 
-Secrelint require .secretlintrc config file.
+Secretlint require .secretlintrc config file.
 The config file define the use of rules.`);
@@ -201,0 +198,0 @@ }

package.json

 {
     "name": "@secretlint/config-loader",
-    "version": "5.2.0",
+    "version": "5.2.1",
     "description": "Config loader for secretlint.",
@@ -48,20 +48,20 @@ "keywords": [
     "dependencies": {
-        "@secretlint/profiler": "^5.2.0",
-        "@secretlint/types": "^5.2.0",
+        "@secretlint/profiler": "^5.2.1",
+        "@secretlint/types": "^5.2.1",
         "ajv": "^8.11.0",
         "debug": "^4.3.4",
-        "rc-config-loader": "^4.0.0",
+        "rc-config-loader": "^4.1.0",
         "try-resolve": "^1.0.1"
     },
     "devDependencies": {
-        "@secretlint/secretlint-rule-internal-test-pure-deps": "^5.2.0",
-        "@types/mocha": "^9.1.0",
-        "@types/node": "^17.0.21",
+        "@secretlint/secretlint-rule-internal-test-pure-deps": "^5.2.1",
+        "@types/mocha": "^9.1.1",
+        "@types/node": "^18.0.0",
         "create-validator-ts": "^3.0.1",
-        "mocha": "^9.2.2",
-        "prettier": "^2.3.1",
+        "mocha": "^10.0.0",
+        "prettier": "^2.7.1",
         "rimraf": "^3.0.2",
-        "ts-node": "^10.7.0",
+        "ts-node": "^10.8.1",
         "ts-node-test-register": "^10.0.0",
-        "typescript": "^4.3.4"
+        "typescript": "^4.7.4"
     },
@@ -74,3 +74,3 @@ "engines": {
     },
-    "gitHead": "334bdc88e68449009ea32399cec2a14f0a2a537b"
+    "gitHead": "4e578c531a3989e9575b49bfa1b47d8a4cb7748e"
 }

src/index.ts

@@ -32,5 +32,2 @@ import { rcFile } from "rc-config-loader";
 };
-// FIXME: https://github.com/microsoft/TypeScript/issues/43329
-// module: node12 will be replace it
-const _importDynamic = new Function("modulePath", "return import(modulePath)");
 export type SecretLintConfigLoaderOptions = {
@@ -139,5 +136,3 @@ cwd?: string;
                 : importSecretlintCreator(
-                      await _importDynamic(
-                          convertToFileUrl(moduleResolver.resolveRulePackageName(configDescriptorRule.id))
-                      )
+                      await import(convertToFileUrl(moduleResolver.resolveRulePackageName(configDescriptorRule.id)))
                   );
@@ -250,3 +245,3 @@ if (isSecretLintCoreConfigRulePreset(ruleCreator)) {
                 
-Secrelint require .secretlintrc config file.
+Secretlint require .secretlintrc config file.
 The config file define the use of rules.`);
@@ -253,0 +248,0 @@ }

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

97226

decreased by-0.53%

Lines of code

1896

decreased by-0.42%

Dependency changes

• Updated@secretlint/profiler@^5.2.1

• Updated@secretlint/types@^5.2.1

• Updatedrc-config-loader@^4.1.0