@vercel/build-utils
Advanced tools
@vercel/build-utils - npm Package Compare versions
+6
-0
| # @vercel/build-utils | ||
| ## 13.14.0 | ||
| ### Minor Changes | ||
| - Support configuration via vercel.toml ([#15750](https://github.com/vercel/vercel/pull/15750)) | ||
| ## 13.13.0 | ||
@@ -4,0 +10,0 @@ |
@@ -86,3 +86,3 @@ "use strict"; | ||
| return function(p) { | ||
| if (p === "now.json" || p === "vercel.json") | ||
| if (p === "now.json" || p === "vercel.json" || p === "vercel.toml") | ||
| return false; | ||
@@ -89,0 +89,0 @@ return ignoreFilter.test(p).ignored; |
+1
-1
| { | ||
| "name": "@vercel/build-utils", | ||
| "version": "13.13.0", | ||
| "version": "13.14.0", | ||
| "license": "Apache-2.0", | ||
@@ -5,0 +5,0 @@ "main": "./dist/index.js", |
Sorry, the diff of this file is too big to display
New alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 11 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Fixed alerts
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 11 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Improved metrics
- Total package byte prevSize
1500137
0.01%