@vercel/node - npm Package Compare versions

Comparing version 5.3.10 to 5.3.11

dist/dev-server.mjs

@@ -1119,3 +1119,3 @@ var __create = Object.create;
   }
-  const shouldUseWebHandlers = options.isMiddleware || HTTP_METHODS.some((method) => typeof listener[method] === "function");
+  const shouldUseWebHandlers = options.isMiddleware || HTTP_METHODS.some((method) => typeof listener[method] === "function") || typeof listener.fetch === "function";
   if (shouldUseWebHandlers) {
@@ -1134,2 +1134,11 @@ const { createWebExportsHandler: createWebExportsHandler2 } = await Promise.resolve().then(() => (init_helpers_web(), helpers_web_exports));
     }
+    if (typeof listener.fetch === "function") {
+      handler = HTTP_METHODS.reduce(
+        (acc, method) => {
+          acc[method] = listener.fetch;
+          return acc;
+        },
+        {}
+      );
+    }
     return getWebExportsHandler(handler, HTTP_METHODS);
@@ -1136,0 +1145,0 @@ }

package.json

 {
   "name": "@vercel/node",
-  "version": "5.3.10",
+  "version": "5.3.11",
   "license": "Apache-2.0",
@@ -5,0 +5,0 @@ "main": "./dist/index",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2778704

0.01%

Lines of code

72153

0.02%

Worsened metrics

Number of medium supply chain risk alerts

6

100%

No dependency changes