@ui5/create-webcomponents-package - npm Package Compare versions

Comparing version 2.22.0-rc.4 to 2.22.0-rc.5

CHANGELOG.md

@@ -6,2 +6,13 @@ # Change Log
 
+# [2.22.0-rc.5](https://github.com/UI5/webcomponents/compare/v2.22.0-rc.4...v2.22.0-rc.5) (2026-05-14)
+
+
+### Bug Fixes
+
+* **CEM:** generation for 3rd party packages ([#13477](https://github.com/UI5/webcomponents/issues/13477)) ([c714873](https://github.com/UI5/webcomponents/commit/c714873bea5fe6b84a227429ac36d73f1c4e8360))
+
+
+
+
+
 # [2.22.0-rc.4](https://github.com/UI5/webcomponents/compare/v2.22.0-rc.3...v2.22.0-rc.4) (2026-05-07)
@@ -8,0 +19,0 @@

package.json

 {
   "name": "@ui5/create-webcomponents-package",
-  "version": "2.22.0-rc.4",
+  "version": "2.22.0-rc.5",
   "description": "UI5 Web Components: create package",
@@ -25,3 +25,3 @@ "author": "SAP SE (https://www.sap.com)",
   },
-  "gitHead": "c6f2ddc2f8bb1c55b9571d0e8f307755d578669d"
+  "gitHead": "f42d27cb7d91aad64df6bf51b3b4cc02d5972b2f"
 }

template/package-scripts.cjs

@@ -5,2 +5,3 @@ const getScripts = require("@ui5/webcomponents-tools/components-package/nps.js"); //eslint-disable-line
 	port: 8080,
+	standalone: false,
 };
@@ -7,0 +8,0 @@

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

121762

0.29%

Lines of code

598

0.17%

No dependency changes