@vitejs/plugin-react - npm Package Compare versions

Comparing version 1.0.2 to 1.0.3

CHANGELOG.md

@@ -0,1 +1,10 @@
+## [1.0.3](https://github.com/vitejs/vite/compare/plugin-react@1.0.2...plugin-react@1.0.3) (2021-10-11)
+
+
+### Bug Fixes
+
+* **plugin-react:** turn off jsx for .ts ([#5198](https://github.com/vitejs/vite/issues/5198)) ([916f9d3](https://github.com/vitejs/vite/commit/916f9d3984d5e83f7cb869b3606a1f043a814b97)), closes [#5102](https://github.com/vitejs/vite/issues/5102)
+
+
+
 ## [1.0.2](https://github.com/vitejs/vite/compare/plugin-react@1.0.1...plugin-react@1.0.2) (2021-10-05)
@@ -2,0 +11,0 @@

package.json

 {
   "name": "@vitejs/plugin-react",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "license": "MIT",
@@ -5,0 +5,0 @@ "author": "Evan You",

src/index.ts

@@ -100,3 +100,2 @@ import type { ParserOptions, TransformOptions, types as t } from '@babel/core'
           ...userParserPlugins,
-          'jsx',
           'importMeta',
@@ -112,2 +111,6 @@ // This plugin is applied before esbuild transforms the code,
 
+        if (!id.endsWith('.ts')) {
+          parserPlugins.push('jsx')
+        }
+
         const isTypeScript = /\.tsx?$/.test(id)
@@ -114,0 +117,0 @@ if (isTypeScript) {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

32706

decreased by-36.53%

Number of package files

11

decreased by-15.38%

Lines of code

752

decreased by-41.66%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes