@vercel/build-utils - npm Package Compare versions

Comparing version 13.2.17 to 13.3.0

CHANGELOG.md

 # @vercel/build-utils
 
+## 13.3.0
+
+### Minor Changes
+
+- Add multi-service support for `vercel dev`. When `VERCEL_USE_EXPERIMENTAL_SERVICES=1` is set, the CLI auto-detects different multi-service layouts and orchestrates dev servers for each service through a single proxy server. ([#14805](https://github.com/vercel/vercel/pull/14805))
+
+### Patch Changes
+
+- [services] add `services` to `config.json` ([#14847](https://github.com/vercel/vercel/pull/14847))
+
 ## 13.2.17
@@ -4,0 +14,0 @@

dist/types.d.ts

 /// <reference types="node" />
+/// <reference types="node" />
 import type FileRef from './file-ref';
@@ -176,2 +177,14 @@ import type FileFsRef from './file-fs-ref';
     publicDir?: string;
+    /**
+     * Optional callback for stdout output from the dev server process.
+     * If provided, the builder should forward stdout to this callback
+     * instead of (or in addition to) the default behavior.
+     */
+    onStdout?: (data: Buffer) => void;
+    /**
+     * Optional callback for stderr output from the dev server process.
+     * If provided, the builder should forward stderr to this callback
+     * instead of (or in addition to) the default behavior.
+     */
+    onStderr?: (data: Buffer) => void;
 };
@@ -449,2 +462,18 @@ export interface StartDevServerSuccess {
 }
+export interface Service {
+    name: string;
+    type: ServiceType;
+    group?: string;
+    workspace: string;
+    entrypoint?: string;
+    framework?: string;
+    builder: Builder;
+    runtime?: string;
+    buildCommand?: string;
+    installCommand?: string;
+    routePrefix?: string;
+    schedule?: string;
+    topic?: string;
+    consumer?: string;
+}
 /** The framework which created the function */
@@ -451,0 +480,0 @@ export interface FunctionFramework {

package.json

 {
   "name": "@vercel/build-utils",
-  "version": "13.2.17",
+  "version": "13.3.0",
   "license": "Apache-2.0",
@@ -5,0 +5,0 @@ "main": "./dist/index.js",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1456282

0.09%

Lines of code

33768

0.09%

No dependency changes