@sveltejs/vite-plugin-svelte
Advanced tools
Comparing version 2.4.1 to 2.4.2
| { | ||
| "name": "@sveltejs/vite-plugin-svelte", | ||
| "version": "2.4.1", | ||
| "version": "2.4.2", | ||
| "license": "MIT", | ||
@@ -41,15 +41,15 @@ "author": "dominikg", | ||
| "magic-string": "^0.30.0", | ||
| "svelte-hmr": "^0.15.1", | ||
| "svelte-hmr": "^0.15.2", | ||
| "vitefu": "^0.2.4", | ||
| "@sveltejs/vite-plugin-svelte-inspector": "^1.0.2" | ||
| "@sveltejs/vite-plugin-svelte-inspector": "^1.0.3" | ||
| }, | ||
| "peerDependencies": { | ||
| "svelte": "^3.54.0 || ^4.0.0-next.0", | ||
| "svelte": "^3.54.0 || ^4.0.0", | ||
| "vite": "^4.0.0" | ||
| }, | ||
| "devDependencies": { | ||
| "@types/debug": "^4.1.7", | ||
| "esbuild": "^0.17.18", | ||
| "svelte": "^3.59.1", | ||
| "vite": "^4.3.5" | ||
| "@types/debug": "^4.1.8", | ||
| "esbuild": "^0.18.6", | ||
| "svelte": "^3.59.2", | ||
| "vite": "^4.3.9" | ||
| }, | ||
@@ -56,0 +56,0 @@ "scripts": { |
@@ -128,9 +128,11 @@ import { compile, preprocess, walk } from 'svelte/compiler'; | ||
| // prevent dangling pure comments | ||
| // see https://github.com/sveltejs/kit/issues/9492#issuecomment-1487704985 | ||
| // uses regex replace with whitespace to keep sourcemap/character count unmodified | ||
| compiled.js.code = compiled.js.code.replace( | ||
| /\/\* [@#]__PURE__ \*\/(\s*)$/gm, | ||
| ' $1' | ||
| ); | ||
| if (isSvelte3) { | ||
| // prevent dangling pure comments | ||
| // see https://github.com/sveltejs/kit/issues/9492#issuecomment-1487704985 | ||
| // uses regex replace with whitespace to keep sourcemap/character count unmodified | ||
| compiled.js.code = compiled.js.code.replace( | ||
| /\/\* [@#]__PURE__ \*\/(\s*)$/gm, | ||
| ' $1' | ||
| ); | ||
| } | ||
| if (endStat) { | ||
@@ -137,0 +139,0 @@ endStat(); |
New alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Fixed alerts
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 2 instances in 1 package
Improved metrics
- Total package byte prevSize
- increased by0.02%
113818
- Lines of code
- increased by0.06%
3433
Worsened metrics
- Number of low supply chain risk alerts
- increased by23.53%
21