@vercel/remix-builder - npm Package Compare versions

Comparing version 2.0.3 to 2.0.4

package.json

 {
   "name": "@vercel/remix-builder",
-  "version": "2.0.3",
+  "version": "2.0.4",
   "license": "Apache-2.0",
@@ -17,7 +17,4 @@ "main": "./dist/index.js",
   "dependencies": {
-    "@vercel/build-utils": "7.1.1",
     "@vercel/nft": "0.22.5",
     "@vercel/static-config": "3.0.0",
-    "path-to-regexp": "6.2.1",
-    "semver": "7.5.2",
     "ts-morph": "12.0.0"
@@ -30,6 +27,9 @@ },
     "@types/semver": "7.3.13",
-    "jest-junit": "16.0.0"
+    "@vercel/build-utils": "7.2.0",
+    "jest-junit": "16.0.0",
+    "path-to-regexp": "6.2.1",
+    "semver": "7.5.2"
   },
   "scripts": {
-    "build": "node ../../utils/build.mjs",
+    "build": "node ../../utils/build-builder.mjs",
     "test": "jest --reporters=default --reporters=jest-junit --env node --verbose --bail --runInBand",
@@ -36,0 +36,0 @@ "test-unit": "pnpm test test/unit.*test.*",

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

271229

increased by124.75%

Dependency count

3

decreased by-50%

Lines of code

7473

increased by467.86%

Worsened metrics

Dev dependency count

8

increased by60%

Number of package files

9

decreased by-60.87%

Number of low supply chain risk alerts

13

increased by333.33%

Dependency changes

• + Addedsemver@7.7.1(transitive)

• - Removed@vercel/build-utils@7.1.1

• - Removedpath-to-regexp@6.2.1

• - Removedsemver@7.5.2

• - Removed@vercel/build-utils@7.1.1(transitive)

• - Removedlru-cache@6.0.0(transitive)

• - Removedpath-to-regexp@6.2.1(transitive)

• - Removedsemver@7.5.2(transitive)