@yummacss/nitro - npm Package Compare versions

Comparing version 3.25.0 to 3.26.0

dist/index.d.mts

 import { a as configName, i as ConfigSchema, n as generator, o as defineConfig, r as Config, t as normalizeCSS } from "./normalize-Duay5QRP.mjs";
 
+//#region src/config/load.d.ts
+interface LoadConfigOptions {
+  /**
+   * Directory to resolve the config file from.
+   *
+   * @default process.cwd()
+   */
+  cwd?: string;
+  /**
+   * Explicit path to the config file, absolute or relative to `cwd`.
+   */
+  path?: string;
+  /**
+   * Inline configuration. When provided, no config file is read.
+   */
+  config?: Config;
+}
+interface LoadedConfig {
+  config: Config;
+  /**
+   * Absolute path of the loaded config file, or null for inline configs.
+   */
+  path: string | null;
+}
+declare function loadConfig(options?: LoadConfigOptions): Promise<LoadedConfig>;
+//#endregion
 //#region src/extractor.d.ts
 declare function extractor(patterns: string[]): Promise<Set<string>>;
 //#endregion
-export { type Config, ConfigSchema, configName, defineConfig, extractor, generator, normalizeCSS };
+//#region src/scan.d.ts
+interface ScanResult {
+  classes: Set<string>;
+  /**
+   * Absolute paths of the scanned files.
+   */
+  files: string[];
+}
+interface ScanOptions {
+  /**
+   * Directory to resolve glob patterns from.
+   *
+   * @default process.cwd()
+   */
+  cwd?: string;
+}
+/**
+ * Like `extractor`, but also returns the resolved file list so callers
+ * (bundler plugins) can register file watchers or dependencies.
+ */
+declare function scan(patterns: string[], options?: ScanOptions): Promise<ScanResult>;
+//#endregion
+export { type Config, ConfigSchema, type LoadConfigOptions, type LoadedConfig, type ScanOptions, type ScanResult, configName, defineConfig, extractor, generator, loadConfig, normalizeCSS, scan };

package.json

 {
   "name": "@yummacss/nitro",
-  "version": "3.25.0",
+  "version": "3.26.0",
   "description": "Fast CSS generation for Yumma CSS",
@@ -35,7 +35,5 @@ "keywords": [
   "dependencies": {
-    "@yummacss/core": "3.25.0"
-  },
-  "devDependencies": {
     "tinyglobby": "^0.2.15",
-    "zod": "^4.3.4"
+    "zod": "^4.3.4",
+    "@yummacss/core": "3.26.0"
   },
@@ -42,0 +40,0 @@ "publishConfig": {

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Dev dependency count

0

-100%

Number of low supply chain risk alerts

2

-50%

Number of medium supply chain risk alerts

0

-100%

Worsened metrics

Total package byte prevSize

15191

-85.77%

Dependency count

3

200%

Lines of code

99

-65.74%

Dependency changes

• + Added

  tinyglobby@^0.2.15

• + Added

  zod@^4.3.4

• + Added

  @yummacss/core@3.26.0
  (transitive)

• + Added

  fdir@6.5.0
  (transitive)

• + Added

  picomatch@4.0.5
  (transitive)

• + Added

  tinyglobby@0.2.17
  (transitive)

• + Added

  zod@4.4.3
  (transitive)

• - Removed

  @yummacss/core@3.25.0
  (transitive)

• Updated

  @yummacss/core@3.26.0