@vercel/next - npm Package Compare versions

Comparing version 4.0.6 to 4.0.7

dist/legacy-launcher.js

 "use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-const next_server_1 = __importDefault(require("next-server"));
-const url_1 = __importDefault(require("url"));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var import_next_server = __toESM(require("next-server"));
+var import_url = __toESM(require("url"));
 if (!process.env.NODE_ENV) {
-    const region = process.env.VERCEL_REGION || process.env.NOW_REGION;
-    process.env.NODE_ENV = region === 'dev1' ? 'development' : 'production';
+  const region = process.env.VERCEL_REGION || process.env.NOW_REGION;
+  process.env.NODE_ENV = region === "dev1" ? "development" : "production";
 }
-const app = (0, next_server_1.default)({});
+const app = (0, import_next_server.default)({});
 module.exports = (req, res) => {
-    const parsedUrl = url_1.default.parse(req.url || '', true);
-    app.render(req, res, 'PATHNAME_PLACEHOLDER', parsedUrl.query, parsedUrl);
+  const parsedUrl = import_url.default.parse(req.url || "", true);
+  app.render(req, res, "PATHNAME_PLACEHOLDER", parsedUrl.query, parsedUrl);
 };

dist/server-launcher.js

 "use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-// The Next.js builder can emit the project in a subdirectory depending on how
-// many folder levels of `node_modules` are traced. To ensure `process.cwd()`
-// returns the proper path, we change the directory to the folder with the
-// launcher. This mimics `yarn workspace run` behavior.
 process.chdir(__dirname);
 const region = process.env.VERCEL_REGION || process.env.NOW_REGION;
 if (!process.env.NODE_ENV) {
-    process.env.NODE_ENV = region === 'dev1' ? 'development' : 'production';
+  process.env.NODE_ENV = region === "dev1" ? "development" : "production";
 }
-if (process.env.NODE_ENV !== 'production' && region !== 'dev1') {
-    console.warn(`Warning: NODE_ENV was incorrectly set to "${process.env.NODE_ENV}", this value is being overridden to "production"`);
-    process.env.NODE_ENV = 'production';
+if (process.env.NODE_ENV !== "production" && region !== "dev1") {
+  console.warn(
+    `Warning: NODE_ENV was incorrectly set to "${process.env.NODE_ENV}", this value is being overridden to "production"`
+  );
+  process.env.NODE_ENV = "production";
 }
-// pre-next-server-target
-// eslint-disable-next-line
-const NextServer = require('__NEXT_SERVER_PATH__').default;
+const NextServer = require("__NEXT_SERVER_PATH__").default;
 const nextServer = new NextServer({
-    // @ts-ignore __NEXT_CONFIG__ value is injected
-    conf: __NEXT_CONFIG__,
-    dir: '.',
-    minimalMode: true,
-    customServer: false,
+  // @ts-ignore __NEXT_CONFIG__ value is injected
+  conf: __NEXT_CONFIG__,
+  dir: ".",
+  minimalMode: true,
+  customServer: false
 });
 const requestHandler = nextServer.getRequestHandler();
 module.exports = async (req, res) => {
-    try {
-        // entryDirectory handler
-        await requestHandler(req, res);
-    }
-    catch (err) {
-        console.error(err);
-        // crash the lambda immediately to clean up any bad module state,
-        // this was previously handled in ___vc_bridge on an unhandled rejection
-        // but we can do this quicker by triggering here
-        process.exit(1);
-    }
+  try {
+    await requestHandler(req, res);
+  } catch (err) {
+    console.error(err);
+    process.exit(1);
+  }
 };

dist/templated-launcher-shared.js

 "use strict";
-// The Next.js builder can emit the project in a subdirectory depending on how
-// many folder levels of `node_modules` are traced. To ensure `process.cwd()`
-// returns the proper path, we change the directory to the folder with the
-// launcher. This mimics `yarn workspace run` behavior.
 process.chdir(__dirname);
 const region = process.env.VERCEL_REGION || process.env.NOW_REGION;
 if (!process.env.NODE_ENV) {
-    process.env.NODE_ENV = region === 'dev1' ? 'development' : 'production';
+  process.env.NODE_ENV = region === "dev1" ? "development" : "production";
 }
-if (process.env.NODE_ENV !== 'production' && region !== 'dev1') {
-    console.warn(`Warning: NODE_ENV was incorrectly set to "${process.env.NODE_ENV}", this value is being overridden to "production"`);
-    process.env.NODE_ENV = 'production';
+if (process.env.NODE_ENV !== "production" && region !== "dev1") {
+  console.warn(
+    `Warning: NODE_ENV was incorrectly set to "${process.env.NODE_ENV}", this value is being overridden to "production"`
+  );
+  process.env.NODE_ENV = "production";
 }
-// @ts-ignore
-// eslint-disable-next-line
 let page = {};
-// __LAUNCHER_PAGE_HANDLER__
-// page.render is for React rendering
-// page.default is for /api rendering
-// page is for module.exports in /api
 module.exports = page.render || page.default || page;

dist/templated-launcher.js

 "use strict";
-// The Next.js builder can emit the project in a subdirectory depending on how
-// many folder levels of `node_modules` are traced. To ensure `process.cwd()`
-// returns the proper path, we change the directory to the folder with the
-// launcher. This mimics `yarn workspace run` behavior.
 process.chdir(__dirname);
 if (!process.env.NODE_ENV) {
-    const region = process.env.VERCEL_REGION || process.env.NOW_REGION;
-    process.env.NODE_ENV = region === 'dev1' ? 'development' : 'production';
+  const region = process.env.VERCEL_REGION || process.env.NOW_REGION;
+  process.env.NODE_ENV = region === "dev1" ? "development" : "production";
 }
-// @ts-ignore
-// eslint-disable-next-line @typescript-eslint/no-var-requires
 const page = require(__LAUNCHER_PAGE_PATH__);
-// page.render is for React rendering
-// page.default is for /api rendering
-// page is for module.exports in /api
 module.exports = page.render || page.default || page;

package.json

 {
   "name": "@vercel/next",
-  "version": "4.0.6",
+  "version": "4.0.7",
   "license": "Apache-2.0",
@@ -15,2 +15,5 @@ "main": "./dist/index",
   ],
+  "dependencies": {
+    "@vercel/nft": "0.24.1"
+  },
   "devDependencies": {
@@ -24,2 +27,3 @@ "@types/aws-lambda": "8.10.19",
     "@types/glob": "7.1.3",
+    "@types/jest": "29.5.5",
     "@types/next-server": "8.0.0",
@@ -31,4 +35,3 @@ "@types/node": "14.18.33",
     "@types/webpack-sources": "3.2.0",
-    "@vercel/build-utils": "7.2.0",
-    "@vercel/nft": "0.22.5",
+    "@vercel/build-utils": "7.2.1",
     "@vercel/routing-utils": "3.0.0",
@@ -59,4 +62,3 @@ "async-sema": "3.0.1",
   "scripts": {
-    "build": "node build.js",
-    "build-dev": "node build.js --dev",
+    "build": "node build.mjs",
     "test": "jest --reporters=default --reporters=jest-junit --env node --verbose --bail --runInBand --testTimeout=360000",
@@ -63,0 +65,0 @@ "test-unit": "pnpm test test/unit/",

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 6 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

548365

decreased by-68.43%

Dependency count

1

increased byInfinity%

Number of package files

8

decreased by-52.94%

Lines of code

15299

decreased by-66.56%

Number of low supply chain risk alerts

47

increased by95.83%

Dependency changes

• + Added@vercel/nft@0.24.1

• + Added@mapbox/node-pre-gyp@1.0.11(transitive)

• + Added@rollup/pluginutils@4.2.1(transitive)

• + Added@vercel/nft@0.24.1(transitive)

• + Addedabbrev@1.1.1(transitive)

• + Addedacorn@8.14.0(transitive)

• + Addedagent-base@6.0.2(transitive)

• + Addedansi-regex@5.0.1(transitive)

• + Addedaproba@2.0.0(transitive)

• + Addedare-we-there-yet@2.0.0(transitive)

• + Addedasync-sema@3.1.1(transitive)

• + Addedbalanced-match@1.0.2(transitive)

• + Addedbindings@1.5.0(transitive)

• + Addedbrace-expansion@1.1.11(transitive)

• + Addedbraces@3.0.3(transitive)

• + Addedchownr@2.0.0(transitive)

• + Addedcolor-support@1.1.3(transitive)

• + Addedconcat-map@0.0.1(transitive)

• + Addedconsole-control-strings@1.1.0(transitive)

• + Addeddebug@4.4.0(transitive)

• + Addeddelegates@1.0.0(transitive)

• + Addeddetect-libc@2.0.3(transitive)

• + Addedemoji-regex@8.0.0(transitive)

• + Addedestree-walker@2.0.2(transitive)

• + Addedfile-uri-to-path@1.0.0(transitive)

• + Addedfill-range@7.1.1(transitive)

• + Addedfs-minipass@2.1.0(transitive)

• + Addedfs.realpath@1.0.0(transitive)

• + Addedgauge@3.0.2(transitive)

• + Addedglob@7.2.3(transitive)

• + Addedgraceful-fs@4.2.11(transitive)

• + Addedhas-unicode@2.0.1(transitive)

• + Addedhttps-proxy-agent@5.0.1(transitive)

• + Addedinflight@1.0.6(transitive)

• + Addedinherits@2.0.4(transitive)

• + Addedis-fullwidth-code-point@3.0.0(transitive)

• + Addedis-number@7.0.0(transitive)

• + Addedmake-dir@3.1.0(transitive)

• + Addedmicromatch@4.0.8(transitive)

• + Addedminimatch@3.1.2(transitive)

• + Addedminipass@3.3.65.0.0(transitive)

• + Addedminizlib@2.1.2(transitive)

• + Addedmkdirp@1.0.4(transitive)

• + Addedms@2.1.3(transitive)

• + Addednode-fetch@2.7.0(transitive)

• + Addednode-gyp-build@4.8.4(transitive)

• + Addednopt@5.0.0(transitive)

• + Addednpmlog@5.0.1(transitive)

• + Addedobject-assign@4.1.1(transitive)

• + Addedonce@1.4.0(transitive)

• + Addedpath-is-absolute@1.0.1(transitive)

• + Addedpicomatch@2.3.1(transitive)

• + Addedreadable-stream@3.6.2(transitive)

• + Addedresolve-from@5.0.0(transitive)

• + Addedrimraf@3.0.2(transitive)

• + Addedsafe-buffer@5.2.1(transitive)

• + Addedsemver@6.3.17.7.1(transitive)

• + Addedset-blocking@2.0.0(transitive)

• + Addedsignal-exit@3.0.7(transitive)

• + Addedstring-width@4.2.3(transitive)

• + Addedstring_decoder@1.3.0(transitive)

• + Addedstrip-ansi@6.0.1(transitive)

• + Addedtar@6.2.1(transitive)

• + Addedto-regex-range@5.0.1(transitive)

• + Addedtr46@0.0.3(transitive)

• + Addedutil-deprecate@1.0.2(transitive)

• + Addedwebidl-conversions@3.0.1(transitive)

• + Addedwhatwg-url@5.0.0(transitive)

• + Addedwide-align@1.1.5(transitive)

• + Addedwrappy@1.0.2(transitive)

• + Addedyallist@4.0.0(transitive)