rolldown - npm Package Compare versions

Comparing version 0.10.3 to 0.10.4

package.json

 {
   "name": "rolldown",
-  "version": "0.10.3",
+  "version": "0.10.4",
   "description": "Fast JavaScript/TypeScript bundler in Rust with Rollup-compatible API.",
@@ -74,8 +74,13 @@ "homepage": "https://rolldown.rs/",
   },
+  "dependencies": {
+    "citty": "^0.1.6",
+    "colorette": "^2.0.20",
+    "consola": "^3.2.3",
+    "locate-character": "^3.0.0",
+    "mri": "^1.2.0",
+    "zod": "^3.23.6"
+  },
   "devDependencies": {
     "@napi-rs/cli": "^3.0.0-alpha",
     "@napi-rs/wasm-runtime": "^0.2.3",
-    "citty": "^0.1.6",
-    "colorette": "^2.0.20",
-    "consola": "^3.2.3",
     "emnapi": "^1.2.0",
@@ -86,4 +91,2 @@ "esbuild": "^0.21.3",
     "glob": "^10.4.1",
-    "locate-character": "^3.0.0",
-    "mri": "^1.2.0",
     "npm-run-all2": "^6.2.0",
@@ -97,24 +100,21 @@ "rollup": "^4.18.0",
     "@rolldown/testing": "0.0.1",
-    "rolldown": "0.10.3"
+    "rolldown": "0.10.4"
   },
   "optionalDependencies": {
-    "@rolldown/binding-darwin-arm64": "0.10.3",
-    "@rolldown/binding-darwin-x64": "0.10.3",
-    "@rolldown/binding-linux-arm-gnueabihf": "0.10.3",
-    "@rolldown/binding-linux-arm64-gnu": "0.10.3",
-    "@rolldown/binding-linux-arm64-musl": "0.10.3",
-    "@rolldown/binding-linux-x64-musl": "0.10.3",
-    "@rolldown/binding-wasm32-wasi": "0.10.3",
-    "@rolldown/binding-win32-arm64-msvc": "0.10.3",
-    "@rolldown/binding-win32-ia32-msvc": "0.10.3",
-    "@rolldown/binding-linux-x64-gnu": "0.10.3",
-    "@rolldown/binding-win32-x64-msvc": "0.10.3"
+    "@rolldown/binding-darwin-x64": "0.10.4",
+    "@rolldown/binding-darwin-arm64": "0.10.4",
+    "@rolldown/binding-linux-arm-gnueabihf": "0.10.4",
+    "@rolldown/binding-linux-arm64-gnu": "0.10.4",
+    "@rolldown/binding-linux-arm64-musl": "0.10.4",
+    "@rolldown/binding-linux-x64-gnu": "0.10.4",
+    "@rolldown/binding-linux-x64-musl": "0.10.4",
+    "@rolldown/binding-win32-ia32-msvc": "0.10.4",
+    "@rolldown/binding-wasm32-wasi": "0.10.4",
+    "@rolldown/binding-win32-x64-msvc": "0.10.4",
+    "@rolldown/binding-win32-arm64-msvc": "0.10.4"
   },
-  "dependencies": {
-    "zod": "^3.23.6"
-  },
   "scripts": {
     "# Scrips for binding #": "_",
     "artifacts": "napi artifacts --cwd ./src --package-json-path ../package.json -o=../artifacts --npm-dir ../npm",
-    "build-binding": "napi build -o=./src --manifest-path ../../crates/rolldown_binding/Cargo.toml --platform -p rolldown_binding --js binding.js --dts binding.d.ts",
+    "build-binding": "napi build -o=./src --manifest-path ../../crates/rolldown_binding/Cargo.toml --platform -p rolldown_binding --js binding.js --dts binding.d.ts --no-const-enum",
     "build-binding:release": "pnpm build-binding --release",
@@ -121,0 +121,0 @@ "build-binding:wasi": "pnpm build-binding --target wasm32-wasip1-threads",

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

16

decreased by-23.81%

Number of package files

73

increased by217.39%

Number of low supply chain risk alerts

12

decreased by-60%

Number of medium supply chain risk alerts

2

decreased by-50%

Worsened metrics

Total package byte prevSize

144768

decreased by-73.51%

Dependency count

17

increased by41.67%

Lines of code

4114

decreased by-74.79%

Dependency changes

• + Addedcitty@^0.1.6

• + Addedcolorette@^2.0.20

• + Addedconsola@^3.2.3

• + Addedlocate-character@^3.0.0

• + Addedmri@^1.2.0

• + Added@rolldown/binding-darwin-arm64@0.10.4(transitive)

• + Added@rolldown/binding-darwin-x64@0.10.4(transitive)

• + Added@rolldown/binding-linux-arm-gnueabihf@0.10.4(transitive)

• + Added@rolldown/binding-linux-arm64-gnu@0.10.4(transitive)

• + Added@rolldown/binding-linux-arm64-musl@0.10.4(transitive)

• + Added@rolldown/binding-linux-x64-gnu@0.10.4(transitive)

• + Added@rolldown/binding-linux-x64-musl@0.10.4(transitive)

• + Added@rolldown/binding-wasm32-wasi@0.10.4(transitive)

• + Added@rolldown/binding-win32-arm64-msvc@0.10.4(transitive)

• + Added@rolldown/binding-win32-ia32-msvc@0.10.4(transitive)

• + Added@rolldown/binding-win32-x64-msvc@0.10.4(transitive)

• + Addedcitty@0.1.6(transitive)

• + Addedcolorette@2.0.20(transitive)

• + Addedconsola@3.4.0(transitive)

• + Addedlocate-character@3.0.0(transitive)

• + Addedmri@1.2.0(transitive)

• - Removed@rolldown/binding-darwin-arm64@0.10.3(transitive)

• - Removed@rolldown/binding-darwin-x64@0.10.3(transitive)

• - Removed@rolldown/binding-linux-arm-gnueabihf@0.10.3(transitive)

• - Removed@rolldown/binding-linux-arm64-gnu@0.10.3(transitive)

• - Removed@rolldown/binding-linux-arm64-musl@0.10.3(transitive)

• - Removed@rolldown/binding-linux-x64-gnu@0.10.3(transitive)

• - Removed@rolldown/binding-linux-x64-musl@0.10.3(transitive)

• - Removed@rolldown/binding-wasm32-wasi@0.10.3(transitive)

• - Removed@rolldown/binding-win32-arm64-msvc@0.10.3(transitive)

• - Removed@rolldown/binding-win32-ia32-msvc@0.10.3(transitive)

• - Removed@rolldown/binding-win32-x64-msvc@0.10.3(transitive)