eslint - npm Package Compare versions

Comparing version 10.0.2 to 10.0.3

lib/rules/no-useless-assignment.js

@@ -141,3 +141,3 @@ /**
 			unnecessaryAssignment:
-				"This assigned value is not used in subsequent statements.",
+				"The value assigned to '{{name}}' is not used in subsequent statements.",
 		},
@@ -490,2 +490,3 @@ },
 					messageId: "unnecessaryAssignment",
+					data: { name: targetAssignment.identifier.name },
 				});
@@ -492,0 +493,0 @@ }

lib/rules/utils/unicode/is-combining-character.js

@@ -9,6 +9,6 @@ /**
  * @param {number} codePoint The character code to check.
- * @returns {boolean} `true` if the character belongs to the category, any of `Mc`, `Me`, and `Mn`.
+ * @returns {boolean} `true` if the character has the General Category of Combining Mark (M), consisting of `Mc`, `Me`, and `Mn`.
  */
 module.exports = function isCombiningCharacter(codePoint) {
-	return /^[\p{Mc}\p{Me}\p{Mn}]$/u.test(String.fromCodePoint(codePoint));
+	return /^\p{M}$/u.test(String.fromCodePoint(codePoint));
 };

package.json

 {
   "name": "eslint",
-  "version": "10.0.2",
+  "version": "10.0.3",
   "author": "Nicholas C. Zakas <[e-mail]>",
@@ -111,6 +111,6 @@ "description": "An AST-based pattern checker for JavaScript.",
     "@eslint-community/regexpp": "^4.12.2",
-    "@eslint/config-array": "^0.23.2",
+    "@eslint/config-array": "^0.23.3",
     "@eslint/config-helpers": "^0.5.2",
-    "@eslint/core": "^1.1.0",
-    "@eslint/plugin-kit": "^0.6.0",
+    "@eslint/core": "^1.1.1",
+    "@eslint/plugin-kit": "^0.6.1",
     "@humanfs/node": "^0.16.6",
@@ -124,3 +124,3 @@ "@humanwhocodes/module-importer": "^1.0.1",
     "escape-string-regexp": "^4.0.0",
-    "eslint-scope": "^9.1.1",
+    "eslint-scope": "^9.1.2",
     "eslint-visitor-keys": "^5.0.1",
@@ -138,3 +138,3 @@ "espree": "^11.1.1",
     "json-stable-stringify-without-jsonify": "^1.0.1",
-    "minimatch": "^10.2.1",
+    "minimatch": "^10.2.4",
     "natural-compare": "^1.4.0",
@@ -149,3 +149,3 @@ "optionator": "^0.9.3"
     "@eslint/json": "^0.14.0",
-    "@eslint/eslintrc": "^3.3.4",
+    "@eslint/eslintrc": "^3.3.5",
     "@trunkio/launcher": "^1.3.4",
@@ -152,0 +152,0 @@ "@types/esquery": "^1.5.4",

README.md

@@ -46,4 +46,10 @@ [![npm version](https://img.shields.io/npm/v/eslint.svg)](https://www.npmjs.com/package/eslint)
 
-Prerequisites: [Node.js](https://nodejs.org/) (`^20.19.0`, `^22.13.0`, or `>=24`) built with SSL support. (If you are using an official Node.js distribution, SSL is always built in.)
+### Prerequisites
 
+To use ESLint, you must have [Node.js](https://nodejs.org/) (`^20.19.0`, `^22.13.0`, or `>=24`) installed and built with SSL support. (If you are using an official Node.js distribution, SSL is always built in.)
+
+If you use ESLint's TypeScript type definitions, TypeScript 5.3 or later is required.
+
+### npm Installation
+
 You can install and configure ESLint using this command:
@@ -354,3 +360,3 @@
 <p><a href="https://automattic.com"><img src="https://images.opencollective.com/automattic/d0ef3e1/logo.png" alt="Automattic" height="128"></a></p><h3>Gold Sponsors</h3>
-<p><a href="https://qlty.sh/"><img src="https://images.opencollective.com/qltysh/33d157d/logo.png" alt="Qlty Software" height="96"></a> <a href="https://shopify.engineering/"><img src="https://avatars.githubusercontent.com/u/8085" alt="Shopify" height="96"></a></p><h3>Silver Sponsors</h3>
+<p><a href="https://qlty.sh/"><img src="https://images.opencollective.com/qltysh/33d157d/logo.png" alt="Qlty Software" height="96"></a></p><h3>Silver Sponsors</h3>
 <p><a href="https://vite.dev/"><img src="https://images.opencollective.com/vite/d472863/logo.png" alt="Vite" height="64"></a> <a href="https://liftoff.io/"><img src="https://images.opencollective.com/liftoff/2d6c3b6/logo.png" alt="Liftoff" height="64"></a> <a href="https://stackblitz.com"><img src="https://avatars.githubusercontent.com/u/28635252" alt="StackBlitz" height="64"></a></p><h3>Bronze Sponsors</h3>
@@ -357,0 +363,0 @@ <p><a href="https://cybozu.co.jp/"><img src="https://images.opencollective.com/cybozu/933e46d/logo.png" alt="Cybozu" height="32"></a> <a href="https://opensource.sap.com"><img src="https://avatars.githubusercontent.com/u/2531208" alt="SAP" height="32"></a> <a href="https://www.crawljobs.com/"><img src="https://images.opencollective.com/crawljobs-poland/fa43a17/logo.png" alt="CrawlJobs" height="32"></a> <a href="https://depot.dev"><img src="https://images.opencollective.com/depot/39125a1/logo.png" alt="Depot" height="32"></a> <a href="https://www.n-ix.com/"><img src="https://images.opencollective.com/n-ix-ltd/575a7a5/logo.png" alt="N-iX Ltd" height="32"></a> <a href="https://icons8.com/"><img src="https://images.opencollective.com/icons8/7fa1641/logo.png" alt="Icons8" height="32"></a> <a href="https://discord.com"><img src="https://images.opencollective.com/discordapp/f9645d9/logo.png" alt="Discord" height="32"></a> <a href="https://www.gitbook.com"><img src="https://avatars.githubusercontent.com/u/7111340" alt="GitBook" height="32"></a> <a href="https://herocoders.com"><img src="https://avatars.githubusercontent.com/u/37549774" alt="HeroCoders" height="32"></a> <a href="https://www.lambdatest.com"><img src="https://avatars.githubusercontent.com/u/171592363" alt="TestMu AI Open Source Office (Formerly LambdaTest)" height="32"></a></p>

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 3 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 3 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2889145

0

Lines of code

93586

0

Number of lines in readme file

370

1.65%

Dependency changes

• Updated

  @eslint/config-array@^0.23.3

• Updated

  @eslint/core@^1.1.1

• Updated

  @eslint/plugin-kit@^0.6.1

• Updated

  eslint-scope@^9.1.2

• Updated

  minimatch@^10.2.4