mobx - npm Package Compare versions

Comparing version 6.15.2 to 6.15.3

dist/api/flow.d.ts

@@ -12,3 +12,5 @@ import { Annotation } from "../internal";
 };
-interface Flow extends Annotation, PropertyDecorator, ClassMethodDecorator {
+type FlowGenerator = (...args: any[]) => Generator<any, any, any> | AsyncGenerator<any, any, any>;
+interface Flow extends Annotation, PropertyDecorator {
+    <This, Value extends FlowGenerator>(value: Value, context: ClassMethodDecoratorContext<This, Value>): Value | void;
     <R, Args extends any[]>(generator: (...args: Args) => Generator<any, R, any> | AsyncGenerator<any, R, any>): (...args: Args) => CancellablePromise<R>;
@@ -15,0 +17,0 @@ bound: Annotation & PropertyDecorator & ClassMethodDecorator;

package.json

 {
     "name": "mobx",
-    "version": "6.15.2",
+    "version": "6.15.3",
     "description": "Simple, scalable state management.",
@@ -5,0 +5,0 @@ "source": "src/mobx.ts",

src/api/flow.ts

@@ -38,3 +38,10 @@ import {
 
-interface Flow extends Annotation, PropertyDecorator, ClassMethodDecorator {
+type FlowGenerator = (...args: any[]) => Generator<any, any, any> | AsyncGenerator<any, any, any>
+
+// PropertyDecorator is only for legacy decorators
+interface Flow extends Annotation, PropertyDecorator {
+    <This, Value extends FlowGenerator>(
+        value: Value,
+        context: ClassMethodDecoratorContext<This, Value>
+    ): Value | void
     <R, Args extends any[]>(
@@ -41,0 +48,0 @@ generator: (...args: Args) => Generator<any, R, any> | AsyncGenerator<any, R, any>

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4365574

0.06%

Lines of code

33724

0.02%

No dependency changes