@volar/typescript - npm Package Compare versions

Comparing version 2.4.25 to 2.4.26

lib/node/utils.js

@@ -39,4 +39,4 @@ "use strict";
     const asTs = sourceFile.fileName + '.ts';
-    // Use getImpliedNodeFormatForFileWroker instead of getImpliedNodeFormatForFile for runTsc() compatibility
-    const impliedNodeFormat = ts.getImpliedNodeFormatForFileWroker?.(asTs, packageJsonInfoCache, host, options)?.impliedNodeFormat;
+    // Use getImpliedNodeFormatForFileWorker instead of getImpliedNodeFormatForFile for runTsc() compatibility
+    const impliedNodeFormat = ts.getImpliedNodeFormatForFileWorker?.(asTs, packageJsonInfoCache, host, options)?.impliedNodeFormat;
     if (impliedNodeFormat === undefined) {
@@ -43,0 +43,0 @@ return;

package.json

 {
 	"name": "@volar/typescript",
-	"version": "2.4.25",
+	"version": "2.4.26",
 	"license": "MIT",
@@ -15,3 +15,3 @@ "files": [
 	"dependencies": {
-		"@volar/language-core": "2.4.25",
+		"@volar/language-core": "2.4.26",
 		"path-browserify": "^1.0.1",
@@ -22,5 +22,5 @@ "vscode-uri": "^3.0.8"
 		"@types/path-browserify": "latest",
-		"@volar/language-service": "2.4.25"
+		"@volar/language-service": "2.4.26"
 	},
-	"gitHead": "cff5cbf8cfe438e27b2ccbc15248937308ff21a7"
+	"gitHead": "4a9d25d797d08d9c149bebf0f52ac5e172f4757d"
 }

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

No metric changes

Dependency changes

• + Added

  @volar/language-core@2.4.26
  (transitive)

• + Added

  @volar/source-map@2.4.26
  (transitive)

• - Removed

  @volar/language-core@2.4.25
  (transitive)

• - Removed

  @volar/source-map@2.4.25
  (transitive)

• Updated

  @volar/language-core@2.4.26