@vercel/build-utils - npm Package Compare versions

Comparing version 13.2.15 to 13.2.16

CHANGELOG.md

 # @vercel/build-utils
 
+## 13.2.16
+
+### Patch Changes
+
+- Add maxConcurrency to experimentalTriggers ([#14725](https://github.com/vercel/vercel/pull/14725))
+
+- Add maxConcurrency trigger field ([#14725](https://github.com/vercel/vercel/pull/14725))
+
 ## 13.2.15
@@ -4,0 +12,0 @@

dist/lambda.js

@@ -211,2 +211,12 @@ "use strict";
         }
+        if (trigger.maxConcurrency !== void 0) {
+          (0, import_assert.default)(
+            typeof trigger.maxConcurrency === "number",
+            `${prefix}.maxConcurrency must be a number`
+          );
+          (0, import_assert.default)(
+            Number.isInteger(trigger.maxConcurrency) && trigger.maxConcurrency >= 1,
+            `${prefix}.maxConcurrency must be at least 1`
+          );
+        }
       }
@@ -213,0 +223,0 @@ }

dist/schemas.d.ts

@@ -65,2 +65,6 @@ export declare const functionsSchema: {
                             };
+                            maxConcurrency: {
+                                type: string;
+                                minimum: number;
+                            };
                         };
@@ -67,0 +71,0 @@ required: string[];

dist/schemas.js

@@ -51,2 +51,6 @@ "use strict";
       minimum: 0
+    },
+    maxConcurrency: {
+      type: "number",
+      minimum: 1
     }
@@ -53,0 +57,0 @@ },

dist/types.d.ts

@@ -551,2 +551,8 @@ /// <reference types="node" />
     initialDelaySeconds?: number;
+    /**
+     * Maximum number of concurrent executions for this consumer (OPTIONAL)
+     * Must be at least 1 if specified.
+     * Behavior when not specified depends on the server's default configuration.
+     */
+    maxConcurrency?: number;
 }
@@ -553,0 +559,0 @@ export type ServiceRuntime = 'node' | 'python' | 'go' | 'rust' | 'ruby';

package.json

 {
   "name": "@vercel/build-utils",
-  "version": "13.2.15",
+  "version": "13.2.16",
   "license": "Apache-2.0",
@@ -5,0 +5,0 @@ "main": "./dist/index.js",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1453211

0.11%

Lines of code

33701

0.11%

No dependency changes