typescript - npm Package Compare versions

Comparing version 6.0.0-dev.20260302 to 6.0.0-dev.20260303

package.json

@@ -5,3 +5,3 @@ {
     "homepage": "https://www.typescriptlang.org/",
-    "version": "6.0.0-dev.20260302",
+    "version": "6.0.0-dev.20260303",
     "license": "Apache-2.0",
@@ -46,3 +46,3 @@ "description": "TypeScript is a language for application scale JavaScript development",
         "@esfx/canceltoken": "^1.0.0",
-        "@eslint/js": "^9.39.1",
+        "@eslint/js": "^10.0.1",
         "@octokit/rest": "^22.0.1",
@@ -56,21 +56,20 @@ "@types/chai": "^4.3.20",
         "@types/which": "^3.0.4",
-        "@typescript-eslint/rule-tester": "^8.47.0",
-        "@typescript-eslint/type-utils": "^8.47.0",
-        "@typescript-eslint/utils": "^8.47.0",
-        "azure-devops-node-api": "^15.1.1",
+        "@typescript-eslint/rule-tester": "^8.56.1",
+        "@typescript-eslint/type-utils": "^8.56.1",
+        "@typescript-eslint/utils": "^8.56.1",
+        "azure-devops-node-api": "^15.1.3",
         "c8": "^10.1.3",
         "chai": "^4.5.0",
         "chokidar": "^4.0.3",
-        "diff": "^8.0.2",
+        "diff": "^8.0.3",
         "dprint": "^0.49.1",
-        "esbuild": "^0.27.0",
-        "eslint": "^9.39.1",
-        "eslint-formatter-autolinkable-stylish": "^1.4.0",
-        "eslint-plugin-regexp": "^2.10.0",
-        "fast-xml-parser": "^5.3.2",
+        "esbuild": "^0.27.3",
+        "eslint": "^10.0.2",
+        "eslint-plugin-regexp": "^3.0.0",
+        "fast-xml-parser": "^5.4.1",
         "glob": "^10.5.0",
-        "globals": "^16.5.0",
-        "hereby": "^1.11.1",
+        "globals": "^17.4.0",
+        "hereby": "^1.12.0",
         "jsonc-parser": "^3.3.1",
-        "knip": "^5.70.0",
+        "knip": "^5.85.0",
         "minimist": "^1.2.8",
@@ -82,7 +81,7 @@ "mocha": "^10.8.2",
         "picocolors": "^1.1.1",
-        "playwright": "^1.56.1",
+        "playwright": "^1.58.2",
         "source-map-support": "^0.5.21",
         "tslib": "^2.8.1",
         "typescript": "^5.9.3",
-        "typescript-eslint": "^8.47.0",
+        "typescript-eslint": "^8.56.1",
         "which": "^3.0.1"
@@ -119,6 +118,6 @@ },
     "volta": {
-        "node": "20.1.0",
+        "node": "22.22.0",
         "npm": "8.19.4"
     },
-    "gitHead": "0c2c7a358297d66df690230deaed8c98e7d77c04"
+    "gitHead": "c9e7428bb76f0543a3555d0af87777e7db3a41e6"
 }

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 11 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

24345756

0.01%

Dev dependency count

42

-2.33%

No dependency changes