@volar/typescript - npm Package Compare versions

Comparing version 2.4.20 to 2.4.21

package.json

 {
 	"name": "@volar/typescript",
-	"version": "2.4.20",
+	"version": "2.4.21",
 	"license": "MIT",
@@ -15,3 +15,3 @@ "files": [
 	"dependencies": {
-		"@volar/language-core": "2.4.20",
+		"@volar/language-core": "2.4.21",
 		"path-browserify": "^1.0.1",
@@ -23,5 +23,5 @@ "vscode-uri": "^3.0.8"
 		"@types/path-browserify": "latest",
-		"@volar/language-service": "2.4.20"
+		"@volar/language-service": "2.4.21"
 	},
-	"gitHead": "a95effedf7b74d3fa8f5d5e168b6d597e3aaca62"
+	"gitHead": "ddb336ac5074cf17afe7929d5bb2258f451e67ff"
 }

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No metric changes

Dependency changes

• + Added

  @volar/language-core@2.4.21
  (transitive)

• + Added

  @volar/source-map@2.4.21
  (transitive)

• - Removed

  @volar/language-core@2.4.20
  (transitive)

• - Removed

  @volar/source-map@2.4.20
  (transitive)

• Updated

  @volar/language-core@2.4.21