@zenstackhq/language - npm Package Compare versions

Comparing version 3.5.2 to 3.5.3

package.json

 {
   "name": "@zenstackhq/language",
+  "displayName": "ZenStack Language Tooling",
   "description": "ZenStack ZModel language specification",
-  "version": "3.5.2",
+  "version": "3.5.3",
+  "type": "module",
+  "author": {
+    "name": "ZenStack Team",
+    "email": "[e-mail]"
+  },
+  "homepage": "https://zenstack.dev",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/zenstackhq/zenstack"
+  },
   "license": "MIT",
-  "author": "ZenStack Team",
   "files": [
@@ -11,3 +21,2 @@ "dist",
   ],
-  "type": "module",
   "exports": {
@@ -64,3 +73,3 @@ ".": {
     "vscode-languageserver": "^9.0.1",
-    "@zenstackhq/common-helpers": "3.5.2"
+    "@zenstackhq/common-helpers": "3.5.3"
   },
@@ -73,6 +82,7 @@ "devDependencies": {
     "tmp": "^0.2.4",
-    "@zenstackhq/eslint-config": "3.5.2",
-    "@zenstackhq/typescript-config": "3.5.2",
-    "@zenstackhq/vitest-config": "3.5.2"
+    "@zenstackhq/typescript-config": "3.5.3",
+    "@zenstackhq/eslint-config": "3.5.3",
+    "@zenstackhq/vitest-config": "3.5.3"
   },
+  "funding": "https://github.com/sponsors/zenstackhq",
   "scripts": {
@@ -79,0 +89,0 @@ "build": "pnpm langium:generate && tsc --noEmit && tsup-node",

New alerts

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2492595

0.01%

Number of low quality alerts

0

-100%

Number of low supply chain risk alerts

43

-2.27%

Dependency changes

• + Added

  @zenstackhq/common-helpers@3.5.3
  (transitive)

• - Removed

  @zenstackhq/common-helpers@3.5.2
  (transitive)

• Updated

  @zenstackhq/common-helpers@3.5.3