rollup - npm Package Compare versions

Comparing version 4.57.0 to 4.57.1

dist/es/getLogFilter.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/parseAst.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/rollup.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/getLogFilter.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/native.js

 const { existsSync } = require('node:fs');
 const path = require('node:path');
 const { platform, arch, report } = require('node:process');
+const { spawnSync } = require('node:child_process');
 
-const isMusl = () => {
+const getReportHeader = () => {
 	try {
-		return !report.getReport().header.glibcVersionRuntime;
+		if (platform !== 'win32') {
+			return report.getReport().header;
+		}
+
+		// This is needed because report.getReport() crashes the process on Windows sometimes.
+		const script =
+			"console.log(JSON.stringify(require('node:process').report.getReport().header));";
+		const child = spawnSync(process.execPath, ['-p', script], {
+			encoding: 'utf8',
+			timeout: 3000,
+			windowsHide: true
+		});
+
+		if (child.status !== 0) {
+			return null;
+		}
+
+		// The output from node -p might include a trailing 'undefined' and newline
+		const stdout = child.stdout?.replace(/undefined\r?\n?$/, '').trim();
+		if (!stdout) {
+			return null;
+		}
+
+		return JSON.parse(stdout);
 	} catch {
-		return false;
+		return null;
 	}
 };
 
+let reportHeader;
 const isMingw32 = () => {
-	try {
-		return report.getReport().header.osName.startsWith('MINGW32_NT');
-	} catch {
-		return false;
-	}
+	reportHeader ??= getReportHeader();
+
+	return reportHeader?.osName?.startsWith('MINGW32_NT') ?? false;
 };
 
+const isMusl = () => {
+	reportHeader ??= getReportHeader();
+
+	return reportHeader ? !reportHeader.glibcVersionRuntime : false;
+};
+
 const bindingsByPlatformAndArch = {
@@ -22,0 +51,0 @@ android: {

dist/parseAst.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/rollup.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/fsevents-importer.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch-cli.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch.js

 /*
   @license
-	Rollup.js v4.57.0
-	Tue, 27 Jan 2026 07:16:05 GMT - commit 743d0546f59799a8f7e4e2f4e1ad167f7dae333d
+	Rollup.js v4.57.1
+	Fri, 30 Jan 2026 08:13:08 GMT - commit d37675f25150d6a94dcf4138853bdc2ecb3ce57b
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

package.json

 {
   "name": "rollup",
-  "version": "4.57.0",
+  "version": "4.57.1",
   "description": "Next-generation ES module bundler",
@@ -117,27 +117,27 @@ "main": "dist/rollup.js",
     "fsevents": "~2.3.2",
-    "@rollup/rollup-darwin-arm64": "4.57.0",
-    "@rollup/rollup-android-arm64": "4.57.0",
-    "@rollup/rollup-win32-arm64-msvc": "4.57.0",
-    "@rollup/rollup-freebsd-arm64": "4.57.0",
-    "@rollup/rollup-linux-arm64-gnu": "4.57.0",
-    "@rollup/rollup-linux-arm64-musl": "4.57.0",
-    "@rollup/rollup-android-arm-eabi": "4.57.0",
-    "@rollup/rollup-linux-arm-gnueabihf": "4.57.0",
-    "@rollup/rollup-linux-arm-musleabihf": "4.57.0",
-    "@rollup/rollup-win32-ia32-msvc": "4.57.0",
-    "@rollup/rollup-linux-loong64-gnu": "4.57.0",
-    "@rollup/rollup-linux-loong64-musl": "4.57.0",
-    "@rollup/rollup-linux-riscv64-gnu": "4.57.0",
-    "@rollup/rollup-linux-riscv64-musl": "4.57.0",
-    "@rollup/rollup-linux-ppc64-gnu": "4.57.0",
-    "@rollup/rollup-linux-ppc64-musl": "4.57.0",
-    "@rollup/rollup-linux-s390x-gnu": "4.57.0",
-    "@rollup/rollup-darwin-x64": "4.57.0",
-    "@rollup/rollup-win32-x64-gnu": "4.57.0",
-    "@rollup/rollup-win32-x64-msvc": "4.57.0",
-    "@rollup/rollup-freebsd-x64": "4.57.0",
-    "@rollup/rollup-linux-x64-gnu": "4.57.0",
-    "@rollup/rollup-linux-x64-musl": "4.57.0",
-    "@rollup/rollup-openbsd-x64": "4.57.0",
-    "@rollup/rollup-openharmony-arm64": "4.57.0"
+    "@rollup/rollup-darwin-arm64": "4.57.1",
+    "@rollup/rollup-android-arm64": "4.57.1",
+    "@rollup/rollup-win32-arm64-msvc": "4.57.1",
+    "@rollup/rollup-freebsd-arm64": "4.57.1",
+    "@rollup/rollup-linux-arm64-gnu": "4.57.1",
+    "@rollup/rollup-linux-arm64-musl": "4.57.1",
+    "@rollup/rollup-android-arm-eabi": "4.57.1",
+    "@rollup/rollup-linux-arm-gnueabihf": "4.57.1",
+    "@rollup/rollup-linux-arm-musleabihf": "4.57.1",
+    "@rollup/rollup-win32-ia32-msvc": "4.57.1",
+    "@rollup/rollup-linux-loong64-gnu": "4.57.1",
+    "@rollup/rollup-linux-loong64-musl": "4.57.1",
+    "@rollup/rollup-linux-riscv64-gnu": "4.57.1",
+    "@rollup/rollup-linux-riscv64-musl": "4.57.1",
+    "@rollup/rollup-linux-ppc64-gnu": "4.57.1",
+    "@rollup/rollup-linux-ppc64-musl": "4.57.1",
+    "@rollup/rollup-linux-s390x-gnu": "4.57.1",
+    "@rollup/rollup-darwin-x64": "4.57.1",
+    "@rollup/rollup-win32-x64-gnu": "4.57.1",
+    "@rollup/rollup-win32-x64-msvc": "4.57.1",
+    "@rollup/rollup-freebsd-x64": "4.57.1",
+    "@rollup/rollup-linux-x64-gnu": "4.57.1",
+    "@rollup/rollup-linux-x64-musl": "4.57.1",
+    "@rollup/rollup-openbsd-x64": "4.57.1",
+    "@rollup/rollup-openharmony-arm64": "4.57.1"
   },
@@ -177,3 +177,3 @@ "dependencies": {
     "@types/yargs-parser": "^21.0.3",
-    "@vue/language-server": "^3.2.2",
+    "@vue/language-server": "^3.2.4",
     "acorn": "^8.15.0",
@@ -200,3 +200,3 @@ "acorn-import-assertions": "^1.9.0",
     "github-api": "^3.4.0",
-    "globals": "^17.0.0",
+    "globals": "^17.1.0",
     "husky": "^9.1.7",
@@ -207,3 +207,3 @@ "is-reference": "^3.0.3",
     "magic-string": "^0.30.21",
-    "memfs": "^4.56.2",
+    "memfs": "^4.56.10",
     "mocha": "^11.7.5",
@@ -217,3 +217,3 @@ "nodemon": "^3.1.11",
     "pinia": "^3.0.4",
-    "prettier": "^3.8.0",
+    "prettier": "^3.8.1",
     "prettier-plugin-organize-imports": "^4.3.0",
@@ -223,3 +223,3 @@ "pretty-bytes": "^7.1.0",
     "requirejs": "^2.3.8",
-    "rollup": "^4.55.2",
+    "rollup": "^4.56.0",
     "rollup-plugin-license": "^3.6.0",
@@ -235,3 +235,3 @@ "semver": "^7.7.3",
     "typescript": "^5.9.3",
-    "typescript-eslint": "^8.53.1",
+    "typescript-eslint": "^8.54.0",
     "vite": "^7.3.1",
@@ -241,8 +241,8 @@ "vitepress": "^1.6.4",
     "vue-eslint-parser": "^10.2.0",
-    "vue-tsc": "^3.2.2",
-    "wasm-pack": "^0.13.1",
+    "vue-tsc": "^3.2.4",
+    "wasm-pack": "^0.14.0",
     "yargs-parser": "^21.1.1"
   },
   "overrides": {
-    "axios": "^1.13.2",
+    "axios": "^1.13.3",
     "esbuild": ">0.24.2",
@@ -253,3 +253,3 @@ "readable-stream": "npm:@built-in/readable-stream@1",
     "path-scurry": {
-      "lru-cache": "^11.2.4"
+      "lru-cache": "^11.2.5"
     }
@@ -256,0 +256,0 @@ },

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2778215

0.04%

Lines of code

68951

0.04%

No dependency changes