@vercel/python-analysis - npm Package Compare versions

Comparing version 0.5.0 to 0.6.0

dist/index.d.ts

@@ -16,3 +16,3 @@ /**
 export type { ClassifyPackagesOptions, PackageClassification, UvLockFile, UvLockPackage, UvLockPackageSource, } from './manifest/uv-lock-parser';
-export { classifyPackages, generateRuntimeRequirements, isPrivatePackageSource, normalizePackageName, parseUvLock, } from './manifest/uv-lock-parser';
+export { classifyPackages, isPrivatePackageSource, normalizePackageName, parseUvLock, } from './manifest/uv-lock-parser';
 export type { PythonSelectionResult } from './manifest/python-selector';
@@ -19,0 +19,0 @@ export { selectPython } from './manifest/python-selector';

dist/manifest/uv-lock-parser.d.ts

@@ -71,8 +71,1 @@ /**
 export declare function classifyPackages(options: ClassifyPackagesOptions): PackageClassification;
-/**
- * Generate requirements.txt content for runtime installation.
- *
- * Only includes public packages that will be installed at runtime from PyPI.
- * Private packages should be bundled separately.
- */
-export declare function generateRuntimeRequirements(classification: PackageClassification): string;

dist/semantic/entrypoints.d.ts

@@ -8,2 +8,3 @@ /**
  * - A top-level 'app' callable (e.g., Flask, FastAPI, Sanic apps)
+ * - A top-level 'application' callable (e.g., Django )
  * - A top-level 'handler' class (e.g., BaseHTTPRequestHandler subclass)
@@ -10,0 +11,0 @@ *

package.json

 {
   "name": "@vercel/python-analysis",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "main": "./dist/index.cjs",
@@ -5,0 +5,0 @@ "module": "./dist/index.js",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

1980588

-0.08%

Lines of code

12044

-0.49%

No dependency changes