rollup-plugin-typescript2 - npm Package Compare versions

Comparing version 0.5.2 to 0.6.0

dist/host.d.ts

@@ -18,3 +18,3 @@ import * as tsTypes from "typescript";
     readDirectory(path: string, extensions?: string[], exclude?: string[], include?: string[]): string[];
-    readFile(path: string, encoding?: string): string;
+    readFile(path: string, encoding?: string): string | undefined;
     fileExists(path: string): boolean;
@@ -21,0 +21,0 @@ getTypeRootsVersion(): number;

package.json

 {
   "name": "rollup-plugin-typescript2",
-  "version": "0.5.2",
+  "version": "0.6.0",
   "description": "Seamless integration between Rollup and TypeScript. Now with errors.",
@@ -29,28 +29,25 @@ "main": "dist/rollup-plugin-typescript2.cjs.js",
   "dependencies": {
+    "fs-extra": "^4.0.2",
+    "tslib": "^1.7.1",
+    "resolve": "^1.4.0"
+  },
+  "devDependencies": {
+    "typescript": "^2.5.3",
+    "object-hash": "^1.1.8",
+    "rollup-pluginutils": "^2.0.1",
     "colors": "^1.1.2",
-    "fs-extra": "^3.0.1",
     "graphlib": "^2.1.1",
     "lodash": "^4.17.4",
-    "object-hash": "^1.1.8",
-    "rollup-pluginutils": "^2.0.1",
-    "typescript": "^2.3.4",
-    "tslib": "^1.7.1",
-    "resolve": "^1.3.3"
-  },
-  "peerDependencies": {
-    "typescript": "^2.0",
-    "tslib": "^1.7.1",
-    "resolve": "^1.3.3"
-  },
-  "devDependencies": {
     "@types/colors": "^1.1.3",
     "@types/fs-extra": "^3.0.3",
     "@types/graphlib": "^2.1.4",
-    "@types/lodash": "^4.14.67",
-    "@types/node": "^8.0.1",
-    "@types/object-hash": "^0.5.28",
+    "@types/lodash": "^4.14.76",
+    "@types/node": "^8.0.31",
+    "@types/object-hash": "^0.5.29",
     "@types/resolve": "^0.0.4",
-    "rimraf": "^2.6.1",
-    "rollup": "^0.48.2",
+    "rimraf": "^2.6.2",
+    "rollup": "^0.50.0",
     "rollup-plugin-typescript2": "github:ezolenko/rollup-plugin-typescript2#master",
+    "rollup-plugin-node-resolve": "^3.0.0",
+    "rollup-plugin-commonjs": "^8.2.1",
     "rollup-watch": "^4.3.1",
@@ -57,0 +54,0 @@ "tslint": "^5.7.0"

README.md

@@ -119,3 +119,3 @@ # rollup-plugin-typescript2
 
-Tested on rollup `0.41.4`.
+Tested on rollup `0.50.0`.
 
@@ -122,0 +122,0 @@ ### Reporting bugs

src/host.ts

@@ -42,3 +42,3 @@ import { tsModule } from "./tsproxy";
 		{
-			this.snapshots[fileName] = tsModule.ScriptSnapshot.fromString(tsModule.sys.readFile(fileName));
+			this.snapshots[fileName] = tsModule.ScriptSnapshot.fromString(tsModule.sys.readFile(fileName)!);
 			this.versions[fileName] = (this.versions[fileName] || 0) + 1;
@@ -88,3 +88,3 @@ return this.snapshots[fileName];
 
-	public readFile(path: string, encoding?: string): string
+	public readFile(path: string, encoding?: string): string | undefined
 	{
@@ -91,0 +91,0 @@ return tsModule.sys.readFile(path, encoding);

src/index.ts

@@ -228,2 +228,5 @@ import { RollupContext } from "./rollupcontext";
 				{
+					if (!filter(id))
+						return;
+
 					const diagnostics = _.concat(
@@ -230,0 +233,0 @@ convertDiagnostic("syntax", service.getSyntacticDiagnostics(id)),

src/parse-ts-config.ts

@@ -18,3 +18,3 @@ import { tsModule } from "./tsproxy";
 	const text = tsModule.sys.readFile(fileName);
-	const result = tsModule.parseConfigFileTextToJson(fileName, text);
+	const result = tsModule.parseConfigFileTextToJson(fileName, text!);
 
@@ -21,0 +21,0 @@ if (result.error)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1300936

increased by1135%

Dependency count

3

decreased by-75%

Lines of code

38147

increased by1521.9%

Worsened metrics

Dev dependency count

20

increased by66.67%

Number of low supply chain risk alerts

12

increased by100%

Number of medium supply chain risk alerts

5

increased byInfinity%

Dependency changes

• + Addedfs-extra@4.0.3(transitive)

• + Addedjsonfile@4.0.0(transitive)

• - Removedcolors@^1.1.2

• - Removedgraphlib@^2.1.1

• - Removedlodash@^4.17.4

• - Removedobject-hash@^1.1.8

• - Removedrollup-pluginutils@^2.0.1

• - Removedtypescript@^2.3.4

• - Removedcolors@1.4.0(transitive)

• - Removedestree-walker@0.6.1(transitive)

• - Removedfs-extra@3.0.1(transitive)

• - Removedgraphlib@2.1.8(transitive)

• - Removedjsonfile@3.0.1(transitive)

• - Removedlodash@4.17.21(transitive)

• - Removedobject-hash@1.3.1(transitive)

• - Removedrollup-pluginutils@2.8.2(transitive)

• - Removedtypescript@2.9.2(transitive)

• Updatedfs-extra@^4.0.2

• Updatedresolve@^1.4.0