veryfront - npm Package Compare versions

Comparing version 0.1.58 to 0.1.59

esm/deno.js

 export default {
     "name": "veryfront",
-    "version": "0.1.58",
+    "version": "0.1.59",
     "license": "Apache-2.0",
@@ -5,0 +5,0 @@ "nodeModulesDir": "auto",

esm/src/modules/server/module-server.d.ts.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"module-server.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-server.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAIlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAkBtE;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAkDrD,CAAC;AASF,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,uBAAuB;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAqTzG;AAuND;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAG7D"}
+{"version":3,"file":"module-server.d.ts","sourceRoot":"","sources":["../../../../src/src/modules/server/module-server.ts"],"names":[],"mappings":"AAAA,4EAA4E;AAC5E,OAAO,KAAK,OAAO,MAAM,wBAAwB,CAAC;AAIlD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AAkBtE;;;;;;;;;GASG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAsDrD,CAAC;AASF,MAAM,WAAW,mBAAmB;IAClC,yDAAyD;IACzD,SAAS,EAAE,MAAM,CAAC;IAClB,6BAA6B;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,sBAAsB;IACtB,OAAO,EAAE,cAAc,CAAC;IACxB,uBAAuB;IACvB,GAAG,CAAC,EAAE,OAAO,CAAC;IACd,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,uDAAuD;IACvD,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;OAGG;IACH,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC7B,yDAAyD;IACzD,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,sDAAsD;AACtD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAqTzG;AAwND;;;;;GAKG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,OAAO,CAAC,OAAO,GAAG,OAAO,CAG7D"}

esm/src/modules/server/module-server.js

@@ -6,3 +6,3 @@ /** Module Server - serves transformed ESM modules at /_vf_modules/* URLs */
 import { transformToESM } from "../../transforms/esm-transform.js";
-import { serverLogger } from "../../utils/index.js";
+import { serverLogger, VERSION } from "../../utils/index.js";
 import { HTTP_NOT_FOUND, HTTP_OK, HTTP_SERVER_ERROR } from "../../utils/index.js";
@@ -80,2 +80,6 @@ import { getContentTypeForPath } from "../../server/handlers/utils/content-types.js";
     "_dnt.polyfills": `export default {};\n`,
+    // Deno import-map alias stub for browser/HTTP-served framework modules.
+    // Must be a JS module (not JSON) because esbuild strips `with { type: "json" }`
+    // at es2020 target, and browsers reject JSON MIME type without the assertion.
+    "_veryfront/_deno-config": `export default ${JSON.stringify({ version: VERSION })};\n`,
 };
@@ -336,2 +340,3 @@ const DEV_MODULE_PREFIX = /^\/(?:_vf_modules|_veryfront\/modules)\//;
     const extensions = [
+        ".json",
         ".tsx.src",
@@ -353,3 +358,3 @@ ".ts.src",
     const rawBasePathWithoutExt = hasKnownExt
-        ? basePath.replace(/\.(tsx|ts|jsx|js|mdx|md)(\.src)?$/, "")
+        ? basePath.replace(/\.(json|tsx|ts|jsx|js|mdx|md)(\.src)?$/, "")
         : basePath;
@@ -381,3 +386,3 @@ let basePathWithoutExt = rawBasePathWithoutExt.replace(/^\/+/, "");
         return {
-            path: `embedded:${basePathWithoutExt}`,
+            path: `embedded:${basePath}`,
             isFrameworkFile: true,
@@ -384,0 +389,0 @@ embeddedContent,

esm/src/transforms.../strategies/veryfront-strategy.d.ts.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"veryfront-strategy.d.ts","sourceRoot":"","sources":["../../../../../src/src/transforms/import-rewriter/strategies/veryfront-strategy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACd,MAAM,aAAa,CAAC;AAkBrB,qBAAa,iBAAkB,YAAW,qBAAqB;IAC7D,QAAQ,CAAC,IAAI,eAAe;IAC5B,QAAQ,CAAC,QAAQ,OAAO;IAExB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO;IAQzD,OAAO,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,cAAc,GAAG,aAAa;CA2CvE;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}
+{"version":3,"file":"veryfront-strategy.d.ts","sourceRoot":"","sources":["../../../../../src/src/transforms/import-rewriter/strategies/veryfront-strategy.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EACV,qBAAqB,EACrB,mBAAmB,EACnB,cAAc,EACd,aAAa,EACd,MAAM,aAAa,CAAC;AAkBrB,qBAAa,iBAAkB,YAAW,qBAAqB;IAC7D,QAAQ,CAAC,IAAI,eAAe;IAC5B,QAAQ,CAAC,QAAQ,OAAO;IAExB,OAAO,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,cAAc,GAAG,OAAO;IASzD,OAAO,CAAC,IAAI,EAAE,mBAAmB,EAAE,GAAG,EAAE,cAAc,GAAG,aAAa;CAkDvE;AAED,eAAO,MAAM,iBAAiB,mBAA0B,CAAC"}

esm/src/transforms...writer/strategies/veryfront-strategy.js

@@ -25,6 +25,13 @@ /**
             specifier.startsWith("veryfront/") ||
-            specifier === "veryfront");
+            specifier === "veryfront" ||
+            specifier === "#deno-config");
     }
     rewrite(info, ctx) {
         const specifier = info.specifier;
+        // Handle #deno-config — Deno import-map alias that doesn't exist in browsers.
+        // Rewrite to a JS module (not JSON) because esbuild strips `with { type: "json" }`
+        // at es2020 target and browsers reject JSON MIME without the assertion.
+        if (specifier === "#deno-config") {
+            return { specifier: "/_vf_modules/_veryfront/_deno-config.js" };
+        }
         // Handle #veryfront/* (internal framework imports)
@@ -31,0 +38,0 @@ if (specifier.startsWith("#veryfront/")) {

esm/src/utils/version.d.ts

@@ -1,2 +0,2 @@
-export declare const VERSION: string;
+export declare const VERSION = "0.1.59";
 export declare const SERVER_START_TIME: number;
@@ -3,0 +3,0 @@ export interface BuildVersion {

esm/src/utils/version.d.ts.map

@@ -1,1 +0,1 @@
-{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../../src/src/utils/version.ts"],"names":[],"mappings":"AAOA,eAAO,MAAM,OAAO,EAAE,MAA6B,CAAC;AAEpD,eAAO,MAAM,iBAAiB,EAAE,MAAmB,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,YAAY,CAM1E"}
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../../../src/src/utils/version.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,OAAO,WAAW,CAAC;AAEhC,eAAO,MAAM,iBAAiB,EAAE,MAAmB,CAAC;AAEpD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,wBAAgB,kBAAkB,CAAC,gBAAgB,CAAC,EAAE,MAAM,GAAG,YAAY,CAM1E"}

esm/src/utils/version.js

@@ -1,7 +0,4 @@
-import denoConfig from "../../deno.js";
-function getVersionFromDeno() {
-    return typeof denoConfig.version === "string" ? denoConfig.version : "0.0.0";
-}
-// Use deno.json version directly to avoid env access at module load
-export const VERSION = getVersionFromDeno();
+// Keep in sync with deno.json version.
+// scripts/release.ts updates this constant during releases.
+export const VERSION = "0.1.59";
 export const SERVER_START_TIME = Date.now();
@@ -8,0 +5,0 @@ export function createBuildVersion(projectUpdatedAt) {

package.json

 {
   "name": "veryfront",
-  "version": "0.1.58",
+  "version": "0.1.59",
   "description": "The simplest way to build AI-powered apps",
@@ -5,0 +5,0 @@ "keywords": [

src/deno.js

 export default {
   "name": "veryfront",
-  "version": "0.1.58",
+  "version": "0.1.59",
   "license": "Apache-2.0",
@@ -5,0 +5,0 @@ "nodeModulesDir": "auto",

src/src/modules/server/module-server.ts

@@ -9,3 +9,3 @@ /** Module Server - serves transformed ESM modules at /_vf_modules/* URLs */
 import { type TransformOptions, transformToESM } from "../../transforms/esm-transform.js";
-import { serverLogger } from "../../utils/index.js";
+import { serverLogger, VERSION } from "../../utils/index.js";
 import { HTTP_NOT_FOUND, HTTP_OK, HTTP_SERVER_ERROR } from "../../utils/index.js";
@@ -85,2 +85,6 @@ import { getContentTypeForPath } from "../../server/handlers/utils/content-types.js";
   "_dnt.polyfills": `export default {};\n`,
+  // Deno import-map alias stub for browser/HTTP-served framework modules.
+  // Must be a JS module (not JSON) because esbuild strips `with { type: "json" }`
+  // at es2020 target, and browsers reject JSON MIME type without the assertion.
+  "_veryfront/_deno-config": `export default ${JSON.stringify({ version: VERSION })};\n`,
 };
@@ -454,2 +458,3 @@
   const extensions = [
+    ".json",
     ".tsx.src",
@@ -473,3 +478,3 @@ ".ts.src",
   const rawBasePathWithoutExt = hasKnownExt
-    ? basePath.replace(/\.(tsx|ts|jsx|js|mdx|md)(\.src)?$/, "")
+    ? basePath.replace(/\.(json|tsx|ts|jsx|js|mdx|md)(\.src)?$/, "")
     : basePath;
@@ -503,3 +508,3 @@ let basePathWithoutExt = rawBasePathWithoutExt.replace(/^\/+/, "");
     return {
-      path: `embedded:${basePathWithoutExt}`,
+      path: `embedded:${basePath}`,
       isFrameworkFile: true,
@@ -506,0 +511,0 @@ embeddedContent,

src/src/transforms...writer/strategies/veryfront-strategy.ts

@@ -39,3 +39,4 @@ /**
       specifier.startsWith("veryfront/") ||
-      specifier === "veryfront"
+      specifier === "veryfront" ||
+      specifier === "#deno-config"
     );
@@ -47,2 +48,9 @@ }
 
+    // Handle #deno-config — Deno import-map alias that doesn't exist in browsers.
+    // Rewrite to a JS module (not JSON) because esbuild strips `with { type: "json" }`
+    // at es2020 target and browsers reject JSON MIME without the assertion.
+    if (specifier === "#deno-config") {
+      return { specifier: "/_vf_modules/_veryfront/_deno-config.js" };
+    }
+
     // Handle #veryfront/* (internal framework imports)
@@ -49,0 +57,0 @@ if (specifier.startsWith("#veryfront/")) {

src/src/utils/version.ts

@@ -1,10 +0,5 @@
-import denoConfig from "../../deno.js";
+// Keep in sync with deno.json version.
+// scripts/release.ts updates this constant during releases.
+export const VERSION = "0.1.59";
 
-function getVersionFromDeno(): string {
-  return typeof denoConfig.version === "string" ? denoConfig.version : "0.0.0";
-}
-
-// Use deno.json version directly to avoid env access at module load
-export const VERSION: string = getVersionFromDeno();
-
 export const SERVER_START_TIME: number = Date.now();
@@ -11,0 +6,0 @@

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

16714453

0.01%

Lines of code

349161

0.01%

No dependency changes