@vitest/mocker - npm Package Compare versions

Comparing version 4.1.0-beta.5 to 4.1.0-beta.6

package.json

 {
   "name": "@vitest/mocker",
   "type": "module",
-  "version": "4.1.0-beta.5",
+  "version": "4.1.0-beta.6",
   "description": "Vitest module mocker implementation",
   "license": "MIT",
   "funding": "https://opencollective.com/vitest",
-  "homepage": "https://github.com/vitest-dev/vitest/tree/main/packages/mocker#readme",
+  "homepage": "https://github.com/vitest-dev/vitest/tree/main/packages/mocker",
   "repository": {
@@ -17,2 +17,7 @@ "type": "git",
   },
+  "keywords": [
+    "vitest",
+    "test",
+    "mock"
+  ],
   "sideEffects": false,
@@ -76,3 +81,3 @@ "exports": {
     "magic-string": "^0.30.21",
-    "@vitest/spy": "4.1.0-beta.5"
+    "@vitest/spy": "4.1.0-beta.6"
   },
@@ -87,4 +92,4 @@ "devDependencies": {
     "vite": "^6.3.5",
-    "@vitest/utils": "4.1.0-beta.5",
-    "@vitest/spy": "4.1.0-beta.5"
+    "@vitest/spy": "4.1.0-beta.6",
+    "@vitest/utils": "4.1.0-beta.6"
   },
@@ -91,0 +96,0 @@ "scripts": {

README.md

 # @vitest/mocker
 
+[![NPM version](https://img.shields.io/npm/v/@vitest/mocker?color=a1b858&label=)](https://npmx.dev/package/@vitest/mocker)
+
 Vitest's module mocker implementation.
 
 [GitHub](https://github.com/vitest-dev/vitest/blob/main/packages/mocker/) | [Documentation](https://github.com/vitest-dev/vitest/blob/main/packages/mocker/EXPORTS.md)

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

186821

0.09%

Number of lines in readme file

8

33.33%

Dependency changes

• + Added

  @vitest/spy@4.1.0-beta.6
  (transitive)

• - Removed

  @vitest/spy@4.1.0-beta.5
  (transitive)

• Updated

  @vitest/spy@4.1.0-beta.6