@vercel/python-analysis - npm Package Compare versions

Comparing version 0.7.0 to 0.8.0

dist/index.d.ts

@@ -9,3 +9,3 @@ /**
  */
-export { containsAppOrHandler } from './semantic/entrypoints';
+export { containsAppOrHandler, getStringConstant, parseDjangoSettingsModule, } from './semantic/entrypoints';
 export type { Distribution, DistributionIndex, PackagePath, DirectUrlInfo, } from './manifest/dist-metadata';
@@ -12,0 +12,0 @@ export { scanDistributions } from './manifest/dist-metadata';

dist/semantic/entrypoints.d.ts

@@ -30,1 +30,21 @@ /**
 export declare function containsAppOrHandler(source: string): Promise<boolean>;
+/**
+ * Extract the string value of a top-level constant with the given name.
+ * Only considers simple assignments (NAME = "string") and annotated assignments
+ * (NAME: str = "string") at module level. Returns the first matching string
+ * value, or null if not found or the value is not a string literal.
+ *
+ * @param source - Python source code
+ * @param name - Constant name (e.g. "VERSION", "APP_NAME")
+ * @returns The string value or null
+ */
+export declare function getStringConstant(source: string, name: string): Promise<string | null>;
+/**
+ * Parse manage.py content for DJANGO_SETTINGS_MODULE (e.g. from
+ * os.environ.setdefault('DJANGO_SETTINGS_MODULE', 'app.settings')).
+ * Uses the WASM Python parser to extract the value from the AST.
+ *
+ * @param content - Raw content of manage.py
+ * @returns The settings module string (e.g. 'app.settings') or null if not found
+ */
+export declare function parseDjangoSettingsModule(content: string): Promise<string | null>;

dist/wasm/vercel_python_analysis.d.ts

@@ -72,2 +72,4 @@ // world root:component/root
   containsAppOrHandler(source: string): boolean,
+  getStringConstant(source: string, name: string): string | undefined,
+  parseDjangoSettingsModule(source: string): string | undefined,
   parseDistMetadata(content: Uint8Array): DistMetadata,
@@ -74,0 +76,0 @@ parseRecord(content: string): Array<RecordEntry>,

package.json

 {
   "name": "@vercel/python-analysis",
-  "version": "0.7.0",
+  "version": "0.8.0",
   "main": "./dist/index.cjs",
@@ -5,0 +5,0 @@ "module": "./dist/index.js",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1993336

0.64%

Lines of code

12204

1.33%

No dependency changes