minimatch - npm Package Compare versions

Comparing version 9.0.8 to 9.0.9

dist/commonjs/index.js

 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.unescape = exports.escape = exports.AST = exports.Minimatch = exports.match = exports.makeRe = exports.braceExpand = exports.defaults = exports.filter = exports.GLOBSTAR = exports.sep = exports.minimatch = void 0;
-const brace_expansion_1 = require("brace-expansion");
+const brace_expansion_1 = __importDefault(require("brace-expansion"));
 const assert_valid_pattern_js_1 = require("./assert-valid-pattern.js");
@@ -157,3 +160,3 @@ const ast_js_1 = require("./ast.js");
     }
-    return (0, brace_expansion_1.expand)(pattern);
+    return (0, brace_expansion_1.default)(pattern);
 };
@@ -160,0 +163,0 @@ exports.braceExpand = braceExpand;

dist/esm/index.js

@@ -1,2 +0,2 @@
-import { expand } from 'brace-expansion';
+import expand from 'brace-expansion';
 import { assertValidPattern } from './assert-valid-pattern.js';
@@ -3,0 +3,0 @@ import { AST } from './ast.js';

package.json

@@ -5,3 +5,3 @@ {
   "description": "a glob matcher in javascript",
-  "version": "9.0.8",
+  "version": "9.0.9",
   "repository": {
@@ -57,5 +57,6 @@ "type": "git",
   "dependencies": {
-    "brace-expansion": "^5.0.2"
+    "brace-expansion": "^2.0.2"
   },
   "devDependencies": {
+    "@types/brace-expansion": "^1.1.2",
     "@types/node": "^25.3.0",
@@ -62,0 +63,0 @@ "mkdirp": "^3.0.1",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

476318

0.04%

Lines of code

4218

0.07%

Worsened metrics

Dev dependency count

7

16.67%

Dependency changes

• + Added

  balanced-match@1.0.2
  (transitive)

• + Added

  brace-expansion@2.0.2
  (transitive)

• - Removed

  balanced-match@4.0.4
  (transitive)

• - Removed

  brace-expansion@5.0.3
  (transitive)

• Updated

  brace-expansion@^2.0.2