@vercel/build-utils - npm Package Compare versions

Comparing version 12.0.0 to 12.1.0

CHANGELOG.md

 # @vercel/build-utils
 
+## 12.1.0
+
+### Minor Changes
+
+- Support turbo.jsonc ([#13792](https://github.com/vercel/vercel/pull/13792))
+
 ## 12.0.0
@@ -4,0 +10,0 @@

dist/fs/run-user-scripts.js

@@ -350,9 +350,21 @@ "use strict";
   const turboJsonPath = import_path.default.join(rootDir, "turbo.json");
-  const turboJsonExists = await import_fs_extra.default.pathExists(turboJsonPath);
+  const turboJsoncPath = import_path.default.join(rootDir, "turbo.jsonc");
+  const [turboJsonExists, turboJsoncExists] = await Promise.all([
+    import_fs_extra.default.pathExists(turboJsonPath),
+    import_fs_extra.default.pathExists(turboJsoncPath)
+  ]);
   let turboJson = null;
+  let turboConfigPath = null;
   if (turboJsonExists) {
+    turboConfigPath = turboJsonPath;
+  } else if (turboJsoncExists) {
+    turboConfigPath = turboJsoncPath;
+  }
+  if (turboConfigPath) {
     try {
-      turboJson = import_json5.default.parse(await import_fs_extra.default.readFile(turboJsonPath, "utf8"));
+      turboJson = import_json5.default.parse(await import_fs_extra.default.readFile(turboConfigPath, "utf8"));
     } catch (err) {
-      console.warn(`WARNING: Failed to parse turbo.json`);
+      console.warn(
+        `WARNING: Failed to parse ${import_path.default.basename(turboConfigPath)}`
+      );
     }
@@ -359,0 +371,0 @@ }

package.json

 {
   "name": "@vercel/build-utils",
-  "version": "12.0.0",
+  "version": "12.1.0",
   "license": "Apache-2.0",
@@ -5,0 +5,0 @@ "main": "./dist/index.js",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1341947

0.07%

Lines of code

30628

0.08%

No dependency changes