@ui5/create-webcomponents-package - npm Package Compare versions

Comparing version 2.22.0 to 2.22.1-rc.0

CHANGELOG.md

@@ -6,2 +6,10 @@ # Change Log
 
+## [2.22.1-rc.0](https://github.com/UI5/webcomponents/compare/v2.22.0-rc.6...v2.22.1-rc.0) (2026-05-21)
+
+**Note:** Version bump only for package @ui5/create-webcomponents-package
+
+
+
+
+
 # [2.22.0](https://github.com/UI5/webcomponents/compare/v2.22.0-rc.4...v2.22.0) (2026-05-11)
@@ -8,0 +16,0 @@

package.json

 {
   "name": "@ui5/create-webcomponents-package",
-  "version": "2.22.0",
+  "version": "2.22.1-rc.0",
   "description": "UI5 Web Components: create package",
@@ -25,3 +25,3 @@ "author": "SAP SE (https://www.sap.com)",
   },
-  "gitHead": "1b2500a573cf0e268d87aa10b22564058a6e4de8"
+  "gitHead": "9e6891583a3a6f14d19812a700c86495a46ee276"
 }

template/package-scripts.cjs

@@ -5,2 +5,3 @@ const getScripts = require("@ui5/webcomponents-tools/components-package/nps.js"); //eslint-disable-line
 	port: 8080,
+	standalone: false,
 };
@@ -7,0 +8,0 @@

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

121789

0.17%

Lines of code

598

0.17%

Worsened metrics

Number of low quality alerts

2

100%

No dependency changes