@vercel/build-utils
Advanced tools
+6
-0
| # @vercel/build-utils | ||
| ## 13.0.2 | ||
| ### Patch Changes | ||
| - Improve warning messages surrounding Elysia ([#14272](https://github.com/vercel/vercel/pull/14272)) | ||
| ## 13.0.1 | ||
@@ -4,0 +10,0 @@ |
@@ -670,7 +670,2 @@ "use strict"; | ||
| } | ||
| if (cliType === "bun") { | ||
| console.warn( | ||
| "Warning: Bun is used as a package manager at build time only, not at runtime with Functions" | ||
| ); | ||
| } | ||
| } | ||
@@ -677,0 +672,0 @@ } |
@@ -1,4 +0,10 @@ | ||
| import { BuildV3 } from './types'; | ||
| import { BuildV3, Config } from './types'; | ||
| import type FileFsRef from './file-fs-ref'; | ||
| export declare function generateNodeBuilderFunctions(frameworkName: string, regex: RegExp, validFilenames: string[], validExtensions: string[], nodeBuild: any): { | ||
| export declare function generateNodeBuilderFunctions(frameworkName: string, regex: RegExp, validFilenames: string[], validExtensions: string[], nodeBuild: any, // necessary to avoid circular dependency | ||
| opts?: { | ||
| checks?: (info: { | ||
| config: Config; | ||
| isBun: boolean; | ||
| }) => void; | ||
| }): { | ||
| require_: NodeRequire; | ||
@@ -5,0 +11,0 @@ findEntrypoint: (files: Record<string, FileFsRef>) => { |
@@ -38,3 +38,3 @@ "use strict"; | ||
| var import_node_module = require("node:module"); | ||
| function generateNodeBuilderFunctions(frameworkName, regex, validFilenames, validExtensions, nodeBuild) { | ||
| function generateNodeBuilderFunctions(frameworkName, regex, validFilenames, validExtensions, nodeBuild, opts) { | ||
| const entrypointsForMessage = validFilenames.map((filename) => `- ${filename}.{${validExtensions.join(",")}}`).join("\n"); | ||
@@ -61,3 +61,5 @@ const require_ = (0, import_node_module.createRequire)(__filename); | ||
| return entrypointCallback(args); | ||
| } | ||
| }, | ||
| checks: opts?.checks ?? (() => { | ||
| }) | ||
| }); | ||
@@ -64,0 +66,0 @@ let version = void 0; |
+2
-2
| { | ||
| "name": "@vercel/build-utils", | ||
| "version": "13.0.1", | ||
| "version": "13.0.2", | ||
| "license": "Apache-2.0", | ||
@@ -30,3 +30,3 @@ "main": "./dist/index.js", | ||
| "@vercel/error-utils": "2.0.3", | ||
| "@vercel/routing-utils": "5.2.1", | ||
| "@vercel/routing-utils": "5.2.2", | ||
| "aggregate-error": "3.0.1", | ||
@@ -33,0 +33,0 @@ "async-retry": "1.2.3", |
Sorry, the diff of this file is too big to display
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 10 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 10 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
1364892
0