vue - npm Package Compare versions

Comparing version 3.3.4 to 3.3.10

compiler-sfc/index.browser.js

+module.exports = require('@vue/compiler-sfc')

compiler-sfc/index.browser.mjs

+export * from '@vue/compiler-sfc'

compiler-sfc/register-ts.js

 if (typeof require !== 'undefined') {
-  try {
-    require('@vue/compiler-sfc').registerTS(require('typescript'))
-  } catch (e) {}
+  require('@vue/compiler-sfc').registerTS(() => require('typescript'))
 }

dist/vue.cjs.js

@@ -22,3 +22,11 @@ 'use strict';
 
-const compileCache = /* @__PURE__ */ Object.create(null);
+const compileCache = /* @__PURE__ */ new WeakMap();
+function getCache(options) {
+  let c = compileCache.get(options != null ? options : shared.EMPTY_OBJ);
+  if (!c) {
+    c = /* @__PURE__ */ Object.create(null);
+    compileCache.set(options != null ? options : shared.EMPTY_OBJ, c);
+  }
+  return c;
+}
 function compileToFunction(template, options) {
@@ -34,3 +42,4 @@ if (!shared.isString(template)) {
   const key = template;
-  const cached = compileCache[key];
+  const cache = getCache(options);
+  const cached = cache[key];
   if (cached) {
@@ -70,3 +79,3 @@ return cached;
   render._rc = true;
-  return compileCache[key] = render;
+  return cache[key] = render;
 }
@@ -77,3 +86,3 @@ runtimeDom.registerRuntimeCompiler(compileToFunction);
 Object.keys(runtimeDom).forEach(function (k) {
-  if (k !== 'default' && !exports.hasOwnProperty(k)) exports[k] = runtimeDom[k];
+  if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) exports[k] = runtimeDom[k];
 });

dist/vue.cjs.prod.js

@@ -22,3 +22,11 @@ 'use strict';
 
-const compileCache = /* @__PURE__ */ Object.create(null);
+const compileCache = /* @__PURE__ */ new WeakMap();
+function getCache(options) {
+  let c = compileCache.get(options != null ? options : shared.EMPTY_OBJ);
+  if (!c) {
+    c = /* @__PURE__ */ Object.create(null);
+    compileCache.set(options != null ? options : shared.EMPTY_OBJ, c);
+  }
+  return c;
+}
 function compileToFunction(template, options) {
@@ -33,3 +41,4 @@ if (!shared.isString(template)) {
   const key = template;
-  const cached = compileCache[key];
+  const cache = getCache(options);
+  const cached = cache[key];
   if (cached) {
@@ -56,3 +65,3 @@ return cached;
   render._rc = true;
-  return compileCache[key] = render;
+  return cache[key] = render;
 }
@@ -63,3 +72,3 @@ runtimeDom.registerRuntimeCompiler(compileToFunction);
 Object.keys(runtimeDom).forEach(function (k) {
-  if (k !== 'default' && !exports.hasOwnProperty(k)) exports[k] = runtimeDom[k];
+  if (k !== 'default' && !Object.prototype.hasOwnProperty.call(exports, k)) exports[k] = runtimeDom[k];
 });

dist/vue.esm-bundler.js

@@ -5,3 +5,3 @@ import * as runtimeDom from '@vue/runtime-dom';
 import { compile } from '@vue/compiler-dom';
-import { isString, NOOP, extend, generateCodeFrame } from '@vue/shared';
+import { isString, NOOP, extend, generateCodeFrame, EMPTY_OBJ } from '@vue/shared';
 
@@ -17,3 +17,11 @@ function initDev() {
 }
-const compileCache = /* @__PURE__ */ Object.create(null);
+const compileCache = /* @__PURE__ */ new WeakMap();
+function getCache(options) {
+  let c = compileCache.get(options != null ? options : EMPTY_OBJ);
+  if (!c) {
+    c = /* @__PURE__ */ Object.create(null);
+    compileCache.set(options != null ? options : EMPTY_OBJ, c);
+  }
+  return c;
+}
 function compileToFunction(template, options) {
@@ -29,3 +37,4 @@ if (!isString(template)) {
   const key = template;
-  const cached = compileCache[key];
+  const cache = getCache(options);
+  const cached = cache[key];
   if (cached) {
@@ -65,3 +74,3 @@ return cached;
   render._rc = true;
-  return compileCache[key] = render;
+  return cache[key] = render;
 }
@@ -68,0 +77,0 @@ registerRuntimeCompiler(compileToFunction);

jsx-runtime/index.d.ts

@@ -1,7 +0,2 @@
-import type {
-  VNode,
-  IntrinsicElementAttributes,
-  ReservedProps,
-  NativeElements
-} from '@vue/runtime-dom'
+import type { VNode, ReservedProps, NativeElements } from '@vue/runtime-dom'
 
@@ -8,0 +3,0 @@ /**

jsx.d.ts

 // global JSX namespace registration
 // somehow we have to copy=pase the jsx-runtime types here to make TypeScript happy
-import type {
-  VNode,
-  IntrinsicElementAttributes,
-  ReservedProps,
-  NativeElements
-} from '@vue/runtime-dom'
+import type { VNode, ReservedProps, NativeElements } from '@vue/runtime-dom'
 
@@ -10,0 +5,0 @@ declare global {

macros.d.ts

@@ -51,6 +51,6 @@ import {
     : T[K] extends WritableComputedRef<infer V>
-    ? WritableComputedRefValue<V>
-    : T[K] extends Ref<infer V>
-    ? RefValue<V>
-    : T[K]
+      ? WritableComputedRefValue<V>
+      : T[K] extends Ref<infer V>
+        ? RefValue<V>
+        : T[K]
 }
@@ -72,15 +72,15 @@
     : T[K] extends ComputedRefValue<infer V>
-    ? ComputedRef<V>
-    : T[K] extends WritableComputedRefValue<infer V>
-    ? WritableComputedRef<V>
-    : T[K] extends object
-    ? T[K] extends
-        | Function
-        | Map<any, any>
-        | Set<any>
-        | WeakMap<any, any>
-        | WeakSet<any>
-      ? T[K]
-      : ToRawRefs<T[K]>
-    : T[K]
+      ? ComputedRef<V>
+      : T[K] extends WritableComputedRefValue<infer V>
+        ? WritableComputedRef<V>
+        : T[K] extends object
+          ? T[K] extends
+              | Function
+              | Map<any, any>
+              | Set<any>
+              | WeakMap<any, any>
+              | WeakSet<any>
+            ? T[K]
+            : ToRawRefs<T[K]>
+          : T[K]
 }
@@ -87,0 +87,0 @@

package.json

 {
   "name": "vue",
-  "version": "3.3.4",
+  "version": "3.3.10",
   "description": "The progressive JavaScript framework for building modern web UI.",
@@ -47,2 +47,3 @@ "main": "index.js",
         "types": "./compiler-sfc/index.d.mts",
+        "browser": "./compiler-sfc/index.browser.mjs",
         "default": "./compiler-sfc/index.mjs"
@@ -52,2 +53,3 @@ },
         "types": "./compiler-sfc/index.d.ts",
+        "browser": "./compiler-sfc/index.browser.js",
         "default": "./compiler-sfc/index.js"
@@ -99,8 +101,16 @@ }
   "dependencies": {
-    "@vue/shared": "3.3.4",
-    "@vue/compiler-dom": "3.3.4",
-    "@vue/runtime-dom": "3.3.4",
-    "@vue/compiler-sfc": "3.3.4",
-    "@vue/server-renderer": "3.3.4"
+    "@vue/shared": "3.3.10",
+    "@vue/server-renderer": "3.3.10",
+    "@vue/compiler-sfc": "3.3.10",
+    "@vue/runtime-dom": "3.3.10",
+    "@vue/compiler-dom": "3.3.10"
+  },
+  "peerDependencies": {
+    "typescript": "*"
+  },
+  "peerDependenciesMeta": {
+    "typescript": {
+      "optional": true
+    }
   }
 }

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Obfuscated code

Supply chain risk

Obfuscated files are intentionally packed to hide their behavior. This could be a sign of malware.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2036929

1.3%

Number of package files

40

5.26%

Lines of code

54177

0.94%

Number of high supply chain risk alerts

0

-100%

Worsened metrics

Dependency count

6

20%

Number of low supply chain risk alerts

155

2.65%

Dependency changes

• + Added

  @vue/compiler-core@3.3.10
  (transitive)

• + Added

  @vue/compiler-dom@3.3.10
  (transitive)

• + Added

  @vue/compiler-sfc@3.3.10
  (transitive)

• + Added

  @vue/compiler-ssr@3.3.10
  (transitive)

• + Added

  @vue/reactivity@3.3.10
  (transitive)

• + Added

  @vue/reactivity-transform@3.3.10
  (transitive)

• + Added

  @vue/runtime-core@3.3.10
  (transitive)

• + Added

  @vue/runtime-dom@3.3.10
  (transitive)

• + Added

  @vue/server-renderer@3.3.10
  (transitive)

• + Added

  @vue/shared@3.3.10
  (transitive)

• + Added

  typescript@6.0.3
  (transitive)

• - Removed

  @vue/compiler-core@3.3.4
  (transitive)

• - Removed

  @vue/compiler-dom@3.3.4
  (transitive)

• - Removed

  @vue/compiler-sfc@3.3.4
  (transitive)

• - Removed

  @vue/compiler-ssr@3.3.4
  (transitive)

• - Removed

  @vue/reactivity@3.3.4
  (transitive)

• - Removed

  @vue/reactivity-transform@3.3.4
  (transitive)

• - Removed

  @vue/runtime-core@3.3.4
  (transitive)

• - Removed

  @vue/runtime-dom@3.3.4
  (transitive)

• - Removed

  @vue/server-renderer@3.3.4
  (transitive)

• - Removed

  @vue/shared@3.3.4
  (transitive)

• Updated

  @vue/compiler-dom@3.3.10

• Updated

  @vue/compiler-sfc@3.3.10

• Updated

  @vue/runtime-dom@3.3.10

• Updated

  @vue/server-renderer@3.3.10

• Updated

  @vue/shared@3.3.10