@sveltejs/vite-plugin-svelte
Advanced tools
Comparing version 1.0.0-next.1 to 1.0.0-next.2
# @sveltejs/vite-plugin-svelte | ||
## 1.0.0-next.2 | ||
### Patch Changes | ||
- Include index.js in package | ||
## 1.0.0-next.1 | ||
### Patch Changes | ||
- 865df9d: Bump version to allow publishing via pnpm |
{ | ||
"name": "@sveltejs/vite-plugin-svelte", | ||
"version": "1.0.0-next.1", | ||
"version": "1.0.0-next.2", | ||
"dependencies": { | ||
@@ -13,2 +13,6 @@ "@rollup/pluginutils": "^4.1.0", | ||
}, | ||
"main": "index.js", | ||
"files": [ | ||
"index.js" | ||
], | ||
"peerDependencies": { | ||
@@ -15,0 +19,0 @@ "svelte": "^3.34.0", |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
22155
4
559
6
1