rollup - npm Package Compare versions

Comparing version 4.59.0 to 4.59.1

dist/es/getLogFilter.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/parseAst.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/es/rollup.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/getLogFilter.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/parseAst.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/rollup.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/fsevents-importer.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/loadConfigFile.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch-cli.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

dist/shared/watch.js

 /*
   @license
-	Rollup.js v4.59.0
-	Sun, 22 Feb 2026 07:31:53 GMT - commit ae846957f109690a866cc3e4c073613c338d3476
+	Rollup.js v4.59.1
+	Sat, 21 Mar 2026 06:45:31 GMT - commit 0cba9e079e1d6e56882558827b37557f36c52966
 
@@ -6,0 +6,0 @@ https://github.com/rollup/rollup

package.json

 {
   "name": "rollup",
-  "version": "4.59.0",
+  "version": "4.59.1",
   "description": "Next-generation ES module bundler",
@@ -117,27 +117,27 @@ "main": "dist/rollup.js",
     "fsevents": "~2.3.2",
-    "@rollup/rollup-darwin-arm64": "4.59.0",
-    "@rollup/rollup-android-arm64": "4.59.0",
-    "@rollup/rollup-win32-arm64-msvc": "4.59.0",
-    "@rollup/rollup-freebsd-arm64": "4.59.0",
-    "@rollup/rollup-linux-arm64-gnu": "4.59.0",
-    "@rollup/rollup-linux-arm64-musl": "4.59.0",
-    "@rollup/rollup-android-arm-eabi": "4.59.0",
-    "@rollup/rollup-linux-arm-gnueabihf": "4.59.0",
-    "@rollup/rollup-linux-arm-musleabihf": "4.59.0",
-    "@rollup/rollup-win32-ia32-msvc": "4.59.0",
-    "@rollup/rollup-linux-loong64-gnu": "4.59.0",
-    "@rollup/rollup-linux-loong64-musl": "4.59.0",
-    "@rollup/rollup-linux-riscv64-gnu": "4.59.0",
-    "@rollup/rollup-linux-riscv64-musl": "4.59.0",
-    "@rollup/rollup-linux-ppc64-gnu": "4.59.0",
-    "@rollup/rollup-linux-ppc64-musl": "4.59.0",
-    "@rollup/rollup-linux-s390x-gnu": "4.59.0",
-    "@rollup/rollup-darwin-x64": "4.59.0",
-    "@rollup/rollup-win32-x64-gnu": "4.59.0",
-    "@rollup/rollup-win32-x64-msvc": "4.59.0",
-    "@rollup/rollup-freebsd-x64": "4.59.0",
-    "@rollup/rollup-linux-x64-gnu": "4.59.0",
-    "@rollup/rollup-linux-x64-musl": "4.59.0",
-    "@rollup/rollup-openbsd-x64": "4.59.0",
-    "@rollup/rollup-openharmony-arm64": "4.59.0"
+    "@rollup/rollup-darwin-arm64": "4.59.1",
+    "@rollup/rollup-android-arm64": "4.59.1",
+    "@rollup/rollup-win32-arm64-msvc": "4.59.1",
+    "@rollup/rollup-freebsd-arm64": "4.59.1",
+    "@rollup/rollup-linux-arm64-gnu": "4.59.1",
+    "@rollup/rollup-linux-arm64-musl": "4.59.1",
+    "@rollup/rollup-android-arm-eabi": "4.59.1",
+    "@rollup/rollup-linux-arm-gnueabihf": "4.59.1",
+    "@rollup/rollup-linux-arm-musleabihf": "4.59.1",
+    "@rollup/rollup-win32-ia32-msvc": "4.59.1",
+    "@rollup/rollup-linux-loong64-gnu": "4.59.1",
+    "@rollup/rollup-linux-loong64-musl": "4.59.1",
+    "@rollup/rollup-linux-riscv64-gnu": "4.59.1",
+    "@rollup/rollup-linux-riscv64-musl": "4.59.1",
+    "@rollup/rollup-linux-ppc64-gnu": "4.59.1",
+    "@rollup/rollup-linux-ppc64-musl": "4.59.1",
+    "@rollup/rollup-linux-s390x-gnu": "4.59.1",
+    "@rollup/rollup-darwin-x64": "4.59.1",
+    "@rollup/rollup-win32-x64-gnu": "4.59.1",
+    "@rollup/rollup-win32-x64-msvc": "4.59.1",
+    "@rollup/rollup-freebsd-x64": "4.59.1",
+    "@rollup/rollup-linux-x64-gnu": "4.59.1",
+    "@rollup/rollup-linux-x64-musl": "4.59.1",
+    "@rollup/rollup-openbsd-x64": "4.59.1",
+    "@rollup/rollup-openharmony-arm64": "4.59.1"
   },
@@ -151,8 +151,8 @@ "dependencies": {
   "devDependencies": {
-    "@codemirror/commands": "^6.10.2",
-    "@codemirror/lang-javascript": "^6.2.4",
-    "@codemirror/language": "^6.12.1",
+    "@codemirror/commands": "^6.10.3",
+    "@codemirror/lang-javascript": "^6.2.5",
+    "@codemirror/language": "^6.12.2",
     "@codemirror/search": "^6.6.0",
-    "@codemirror/state": "^6.5.4",
-    "@codemirror/view": "^6.39.14",
+    "@codemirror/state": "^6.6.0",
+    "@codemirror/view": "^6.40.0",
     "@eslint/js": "^10.0.1",
@@ -165,3 +165,3 @@ "@inquirer/prompts": "^7.10.1",
     "@rollup/plugin-buble": "^1.0.3",
-    "@rollup/plugin-commonjs": "^29.0.0",
+    "@rollup/plugin-commonjs": "^29.0.2",
     "@rollup/plugin-json": "^6.1.0",
@@ -173,10 +173,10 @@ "@rollup/plugin-node-resolve": "^16.0.3",
     "@rollup/pluginutils": "^5.3.0",
-    "@shikijs/vitepress-twoslash": "^3.22.0",
+    "@shikijs/vitepress-twoslash": "^4.0.2",
     "@types/mocha": "^10.0.10",
-    "@types/node": "^20.19.33",
+    "@types/node": "^20.19.37",
     "@types/picomatch": "^4.0.2",
     "@types/semver": "^7.7.1",
     "@types/yargs-parser": "^21.0.3",
-    "@vue/language-server": "^3.2.4",
-    "acorn": "^8.15.0",
+    "@vue/language-server": "^3.2.5",
+    "acorn": "^8.16.0",
     "acorn-import-assertions": "^1.9.0",
@@ -193,3 +193,3 @@ "acorn-jsx": "^5.3.2",
     "es6-shim": "^0.35.8",
-    "eslint": "^10.0.0",
+    "eslint": "^10.0.3",
     "eslint-config-prettier": "^10.1.8",
@@ -201,15 +201,15 @@ "eslint-plugin-prettier": "^5.5.5",
     "flru": "^1.0.2",
-    "fs-extra": "^11.3.3",
+    "fs-extra": "^11.3.4",
     "github-api": "^3.4.0",
-    "globals": "^17.3.0",
+    "globals": "^17.4.0",
     "husky": "^9.1.7",
     "is-reference": "^3.0.3",
-    "lint-staged": "^16.2.7",
+    "lint-staged": "^16.4.0",
     "locate-character": "^3.0.0",
     "magic-string": "^0.30.21",
-    "memfs": "^4.56.10",
-    "mocha": "11.3.0",
-    "nodemon": "^3.1.11",
+    "memfs": "^4.56.11",
+    "mocha": "11.7.5",
+    "nodemon": "^3.1.14",
     "npm-audit-resolver": "^3.0.0-RC.0",
-    "nyc": "^17.1.0",
+    "nyc": "^18.0.0",
     "patch-package": "^8.0.1",
@@ -224,3 +224,3 @@ "picocolors": "^1.1.1",
     "requirejs": "^2.3.8",
-    "rollup": "^4.57.1",
+    "rollup": "^4.59.0",
     "rollup-plugin-license": "^3.7.0",
@@ -233,11 +233,11 @@ "semver": "^7.7.4",
     "systemjs": "^6.15.1",
-    "terser": "^5.46.0",
+    "terser": "^5.46.1",
     "tslib": "^2.8.1",
     "typescript": "^5.9.3",
-    "typescript-eslint": "^8.56.0",
+    "typescript-eslint": "^8.57.1",
     "vite": "^7.3.1",
     "vitepress": "^1.6.4",
-    "vue": "^3.5.28",
+    "vue": "^3.5.30",
     "vue-eslint-parser": "^10.4.0",
-    "vue-tsc": "^3.2.4",
+    "vue-tsc": "^3.2.5",
     "wasm-pack": "^0.14.0",
@@ -247,7 +247,7 @@ "yargs-parser": "^21.1.1"
   "overrides": {
-    "axios": "^1.13.5",
+    "axios": "^1.13.6",
     "esbuild": ">0.24.2",
     "lodash-es": ">4.17.22",
     "path-scurry": {
-      "lru-cache": "^11.2.6"
+      "lru-cache": "^11.2.7"
     },
@@ -254,0 +254,0 @@ "readable-stream": "npm:@built-in/readable-stream@1",

README.md

@@ -12,4 +12,4 @@ <p align="center">
   </a>
-  <a href="https://packagephobia.now.sh/result?p=rollup">
-    <img src="https://packagephobia.now.sh/badge?p=rollup" alt="install size" >
+  <a href="https://packagephobia.com/result?p=rollup">
+    <img src="https://packagephobia.com/badge?p=rollup" alt="install size" >
   </a>
@@ -16,0 +16,0 @@ <a href="https://codecov.io/gh/rollup/rollup">

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2781296

0.01%

Lines of code

69019

0.01%

No dependency changes