typescript-deno-plugin - npm Package Compare versions

Comparing version 1.30.0 to 1.31.0

CHANGELOG.md

 # Changelog
 
+## 1.31.0 - 2020-05-29
+
+- support @deno-types ([#46](https://github.com/justjavac/typescript-deno-plugin/pull/46))
+
 ## 1.30.0 - 2020-05-28
@@ -4,0 +8,0 @@

out/index.js

@@ -16,2 +16,3 @@ "use strict";
 const hash_meta_1 = require("./module_resolver/hash_meta");
+const deno_modules_1 = require("./deno_modules");
 const codefix_provider_1 = require("./codefix_provider");
@@ -94,2 +95,14 @@ require("./code_fixes");
                     parsedImportMap = parseImportMapFromFile(projectDirectory, config.importmap);
+                    const content = typescript.sys.readFile(containingFile, "utf8");
+                    // handle @deno-types
+                    if (content && content.indexOf("// @deno-types=") >= 0) {
+                        const sourceFile = typescript.createSourceFile(containingFile, content, typescript.ScriptTarget.ESNext, true);
+                        const modules = deno_modules_1.getImportModules(sourceFile);
+                        for (const m of modules) {
+                            if (m.hint) {
+                                const index = moduleNames.findIndex((v) => v === m.moduleName);
+                                moduleNames[index] = m.hint.text;
+                            }
+                        }
+                    }
                     // try resolve typeReferenceDirectives
@@ -96,0 +109,0 @@ for (let moduleName of moduleNames) {

package.json

 {
   "name": "typescript-deno-plugin",
-  "version": "1.30.0",
+  "version": "1.31.0",
   "description": "Deno language service plugin for TypeScript",
@@ -5,0 +5,0 @@ "main": "out/index.js",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

226760

0.41%

Lines of code

5659

0.23%

No dependency changes