@vercel/build-utils - npm Package Compare versions

Comparing version 13.6.2 to 13.6.3

CHANGELOG.md

 # @vercel/build-utils
 
+## 13.6.3
+
+### Patch Changes
+
+- Updated dependencies [[`d1c4d7052033aaf7b3f2044aa24484cb143b9348`](https://github.com/vercel/vercel/commit/d1c4d7052033aaf7b3f2044aa24484cb143b9348)]:
+  - @vercel/python-analysis@0.8.2
+
 ## 13.6.2
@@ -4,0 +11,0 @@

dist/errors.js

@@ -54,3 +54,3 @@ "use strict";
     });
-  } catch (e) {
+  } catch (_e) {
     return new NowBuildError({
@@ -57,0 +57,0 @@ code: "INVALID_VERCEL_CONFIG",

dist/fs/read-config-file.js

@@ -68,3 +68,3 @@ "use strict";
         }
-      } catch (error) {
+      } catch (_error) {
         console.log(`Error while parsing config file: "${name}"`);
@@ -80,3 +80,3 @@ }
     return JSON.parse(await (0, import_fs_extra.readFile)(packagePath, "utf8"));
-  } catch (err) {
+  } catch (_err) {
     return {};
@@ -83,0 +83,0 @@ }

dist/fs/run-user-scripts.js

@@ -397,3 +397,3 @@ "use strict";
       turboJson = import_json5.default.parse(await import_fs_extra.default.readFile(turboConfigPath, "utf8"));
-    } catch (err) {
+    } catch (_err) {
       console.warn(
@@ -400,0 +400,0 @@ `WARNING: Failed to parse ${import_path.default.basename(turboConfigPath)}`

dist/generate-node-builder-functions.js

@@ -73,3 +73,3 @@ "use strict";
       }
-    } catch (e) {
+    } catch (_e) {
     }
@@ -76,0 +76,0 @@ res.output.framework = {

package.json

 {
   "name": "@vercel/build-utils",
-  "version": "13.6.2",
+  "version": "13.6.3",
   "license": "Apache-2.0",
@@ -14,3 +14,3 @@ "main": "./dist/index.js",
   "dependencies": {
-    "@vercel/python-analysis": "0.8.1"
+    "@vercel/python-analysis": "0.8.2"
   },
@@ -55,3 +55,3 @@ "devDependencies": {
     "@vercel/error-utils": "2.0.3",
-    "@vercel/routing-utils": "6.0.1"
+    "@vercel/routing-utils": "6.0.2"
   },
@@ -58,0 +58,0 @@ "scripts": {

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 3 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1414827

0.02%

Dependency changes

• + Added

  @vercel/python-analysis@0.8.2
  (transitive)

• - Removed

  @vercel/python-analysis@0.8.1
  (transitive)

• Updated

  @vercel/python-analysis@0.8.2