node-gyp - npm Package Compare versions
| export default { | ||
| extends: ['@commitlint/config-conventional'] | ||
| }; |
| { | ||
| ".": "12.4.0" | ||
| ".": "13.0.0" | ||
| } |
@@ -102,2 +102,7 @@ 'use strict' | ||
| } | ||
| // disable LTO for addon builds. node release builds may enable (thin) LTO, | ||
| // which leaks clang/lld-only flags like -flto=thin and /opt:lldltojobs into | ||
| // addons built with the default MSVC toolchain, which rejects those flags | ||
| variables.enable_lto = 'false' | ||
| variables.enable_thin_lto = 'false' | ||
| } | ||
@@ -104,0 +109,0 @@ |
+7
-5
@@ -14,3 +14,3 @@ { | ||
| ], | ||
| "version": "12.4.0", | ||
| "version": "13.0.0", | ||
| "installVersion": 11, | ||
@@ -29,4 +29,4 @@ "author": "Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)", | ||
| "graceful-fs": "^4.2.6", | ||
| "nopt": "^9.0.0", | ||
| "proc-log": "^6.0.0", | ||
| "nopt": "^10.0.0", | ||
| "proc-log": "^7.0.0", | ||
| "semver": "^7.3.5", | ||
@@ -36,8 +36,10 @@ "tar": "^7.5.4", | ||
| "undici": "^6.25.0", | ||
| "which": "^6.0.0" | ||
| "which": "^7.0.0" | ||
| }, | ||
| "engines": { | ||
| "node": "^20.17.0 || >=22.9.0" | ||
| "node": "^22.22.2 || ^24.15.0 || >=26.0.0" | ||
| }, | ||
| "devDependencies": { | ||
| "@commitlint/cli": "^21.0.2", | ||
| "@commitlint/config-conventional": "^21.0.2", | ||
| "bindings": "^1.5.0", | ||
@@ -44,0 +46,0 @@ "cross-env": "^10.1.0", |
Sorry, the diff of this file is too big to display
New alerts
Potential vulnerability
Supply chain riskInitial human review suggests the presence of a vulnerability in this package. It is pending further analysis and confirmation.
Found 2 instances
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Fixed alerts
Potential vulnerability
Supply chain riskInitial human review suggests the presence of a vulnerability in this package. It is pending further analysis and confirmation.
Found 2 instances
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Improved metrics
- Total package byte prevSize
1878708
0.12%- Number of package files
109
0.93%- Lines of code
35676
0.02%Worsened metrics
- Dev dependency count
9
28.57%Dependency changes
+ Added
abbrev@5.0.0(transitive)+ Added
nopt@10.0.1(transitive)+ Added
proc-log@7.0.0(transitive)+ Added
which@7.0.0(transitive)- Removed
abbrev@4.0.0(transitive)- Removed
nopt@9.0.0(transitive)- Removed
proc-log@6.1.0(transitive)- Removed
which@6.0.1(transitive)Updated
nopt@^10.0.0Updated
proc-log@^7.0.0Updated
which@^7.0.0