svelte-eslint-parser - npm Package Compare versions

Comparing version 0.9.0 to 0.9.1

lib/context/script-let.js

@@ -611,12 +611,19 @@ "use strict";
 function removeReference(reference, baseScope) {
-    if (reference.resolved &&
-        reference.resolved.defs.some((d) => d.name === reference.identifier)) {
-        // remove var
-        const varIndex = baseScope.variables.indexOf(reference.resolved);
-        if (varIndex >= 0) {
-            baseScope.variables.splice(varIndex, 1);
+    if (reference.resolved) {
+        if (reference.resolved.defs.some((d) => d.name === reference.identifier)) {
+            // remove var
+            const varIndex = baseScope.variables.indexOf(reference.resolved);
+            if (varIndex >= 0) {
+                baseScope.variables.splice(varIndex, 1);
+            }
+            const name = reference.identifier.name;
+            if (reference.resolved === baseScope.set.get(name)) {
+                baseScope.set.delete(name);
+            }
         }
-        const name = reference.identifier.name;
-        if (reference.resolved === baseScope.set.get(name)) {
-            baseScope.set.delete(name);
+        else {
+            const refIndex = reference.resolved.references.indexOf(reference);
+            if (refIndex >= 0) {
+                reference.resolved.references.splice(refIndex, 1);
+            }
         }
@@ -623,0 +630,0 @@ }

package.json

 {
     "name": "svelte-eslint-parser",
-    "version": "0.9.0",
+    "version": "0.9.1",
     "description": "Svelte parser for ESLint",
@@ -5,0 +5,0 @@ "main": "lib/index.js",

New alerts

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

157478

0.17%

Lines of code

3762

0.19%

No dependency changes