redos-detector - npm Package Compare versions

Comparing version 6.0.2 to 6.1.0

dist/checker-reader.d.ts

@@ -5,2 +5,3 @@ import { Reader } from './reader';
 import { CharacterReaderLevel2, CharacterReaderLevel2Stack } from './character-reader/character-reader-level-2';
+import { NodeExtra } from './node-extra';
 export type CheckerInput = Readonly<{
@@ -13,2 +14,3 @@ atomicGroupOffsets: ReadonlySet<number>;
     timeout: number;
+    nodeExtra: NodeExtra;
 }>;
@@ -15,0 +17,0 @@ export type CharacterGroupsOrReference = Readonly<{

dist/node-extra.d.ts

@@ -7,3 +7,4 @@ import { CapturingGroup, NonCapturingGroup, Reference } from 'regjsparser';
     nodeToLookaheadStack: ReadonlyMap<CapturingGroup<MyFeatures> | Reference<MyFeatures>, readonly NonCapturingGroup<MyFeatures>[]>;
+    reachableReferences: readonly Reference<MyFeatures>[];
 }>;
 export declare function buildNodeExtra(regexp: MyRootNode): NodeExtra;

dist/nodes/quantifier.d.ts

 import { CharacterReader } from '../character-reader/character-reader-level-0';
 import { CharacterReaderLevel2Stack } from '../character-reader/character-reader-level-2';
 import { MyFeatures } from '../parse';
+import { NodeExtra } from '../node-extra';
 import { Quantifier } from 'regjsparser';
@@ -12,3 +13,3 @@ export type QuantifierIterations = ReadonlyMap<Quantifier<MyFeatures>, number>;
 export type QuantifiersInInfinitePortion = ReadonlySet<Quantifier<MyFeatures>>;
-export declare function buildQuantifiersInInfinitePortion(stack: CharacterReaderLevel2Stack): QuantifiersInInfinitePortion;
+export declare function buildQuantifiersInInfinitePortion(stack: CharacterReaderLevel2Stack, nodeExtra: NodeExtra): QuantifiersInInfinitePortion;
 export declare function buildQuantifierIterations(stack: CharacterReaderLevel2Stack): QuantifierIterations;
@@ -15,0 +16,0 @@ export declare function buildQuantifierCharacterReader({ caseInsensitive, dotAll, node, }: {

package.json

@@ -44,8 +44,5 @@ {
   "homepage": "https://github.com/tjenkinson/redos-detector#readme",
-  "dependencies": {
-    "regjsparser": "0.10.0"
-  },
   "devDependencies": {
     "@rollup/plugin-commonjs": "25.0.8",
-    "@rollup/plugin-node-resolve": "15.3.0",
+    "@rollup/plugin-node-resolve": "15.3.1",
     "@rollup/plugin-typescript": "11.1.6",
@@ -56,6 +53,6 @@ "@types/jest": "29.5.14",
     "@typescript-eslint/parser": "6.21.0",
-    "commander": "11.1.0",
+    "commander": "12.1.0",
     "eslint": "8.57.1",
     "eslint-config-prettier": "9.1.0",
-    "eslint-plugin-redos-detector": "2.4.3",
+    "eslint-plugin-redos-detector": "3.0.2",
     "forkable-iterator": "1.1.2",
@@ -66,9 +63,10 @@ "husky": "8.0.3",
     "micromatch": "4.0.8",
-    "prettier": "3.0.3",
+    "prettier": "3.4.2",
+    "regjsparser": "0.12.0",
     "rollup": "4.28.1",
     "ts-jest": "29.2.5",
     "tslib": "2.8.1",
-    "typescript": "5.4.5"
+    "typescript": "5.7.2"
   },
-  "version": "6.0.2"
+  "version": "6.1.0"
 }

New alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

785990

4.24%

Dependency count

0

-100%

Lines of code

17645

5.82%

Number of low supply chain risk alerts

127

-21.12%

Number of medium supply chain risk alerts

0

-100%

Worsened metrics

Dev dependency count

22

4.76%

Dependency changes

• - Removed

  regjsparser@0.10.0

• - Removed

  jsesc@0.5.0
  (transitive)

• - Removed

  regjsparser@0.10.0
  (transitive)