fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@babel/parser (source)	^7.24.0 -> ^7.24.7
@babel/types (source)	^7.24.0 -> ^7.24.7
@sxzz/eslint-config	^3.8.6 -> ^3.12.1
@sxzz/prettier-config	^2.0.1 -> ^2.0.2
@types/node (source)	^20.11.28 -> ^20.14.2
ast-kit	^0.12.1 -> ^0.12.2
bumpp	^9.4.0 -> ^9.4.1
magic-string	^0.30.8 -> ^0.30.10
pnpm (source)	8.15.4 -> 8.15.8
prettier (source)	^3.2.5 -> ^3.3.1
tsup (source)	^8.0.2 -> ^8.1.0
tsx	^4.7.1 -> ^4.12.0
typescript (source)	^5.4.2 -> ^5.4.5
vite (source)	^5.1.6 -> ^5.2.12
vitest (source)	^1.4.0 -> ^1.6.0

---

Release Notes

babel/babel (@​babel/parser)

v7.24.7

Compare Source

v7.24.7 (2024-06-05)

🐛 Bug Fix

• babel-node
  • #​16554 Allow extra flags in babel-node (@​nicolo-ribaudo)
• babel-traverse
  • #​16522 fix: incorrect constantViolations with destructuring (@​liuxingbaoyu)
• babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  • #​16524 fix: Transform using in switch correctly (@​liuxingbaoyu)

🏠 Internal

• babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16525 Delete unused array helpers (@​blakewilson)

Committers: 7

• Amjad Yahia Robeen Hassan (@​amjed-98)
• Babel Bot (@​babel-bot)
• Blake Wilson (@​blakewilson)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Sukka (@​SukkaW)
• @​liuxingbaoyu

v7.24.6

Compare Source

v7.24.6 (2024-05-24)

Thanks @​amjed-98, @​blakewilson, @​coelhucas, and @​SukkaW for your first PRs!

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • #​16514 Fix source maps for private member expressions (@​nicolo-ribaudo)
• babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  • #​16515 Fix source maps for template literals (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​16485 Support undecorated static accessor in anonymous classes (@​JLHwung)
  • #​16484 Fix decorator bare yield await (@​JLHwung)
• babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  • #​16483 Fix: throw TypeError if addInitializer is called after finished (@​JLHwung)
• babel-parser, babel-plugin-transform-typescript
  • #​16476 fix: Correctly parse cls.fn<C> = x (@​liuxingbaoyu)

🏠 Internal

• babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16501 Generate helper metadata at build time (@​nicolo-ribaudo)
• babel-helpers
  • #​16499 Add tsconfig.json for @babel/helpers/src/helpers (@​nicolo-ribaudo)
• babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16495 Move all runtime helpers to individual files (@​nicolo-ribaudo)
• babel-parser, babel-traverse
  • #​16482 Statically generate boilerplate for bitfield accessors (@​nicolo-ribaudo)
• Other
  • #​16466 Migrate import assertions syntax (@​JLHwung)

Committers: 9

• Amjad Yahia Robeen Hassan (@​amjed-98)
• Babel Bot (@​babel-bot)
• Blake Wilson (@​blakewilson)
• Huáng Jùnliàng (@​JLHwung)
• Lucas Coelho (@​coelhucas)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Sukka (@​SukkaW)
• Zzzen (@​Zzzen)
• @​liuxingbaoyu

v7.24.5

Compare Source

v7.24.5 (2024-04-29)

Thanks @​romgrk and @​sossost for your first PRs!

🐛 Bug Fix

• babel-plugin-transform-classes, babel-traverse
  • #​16377 fix: TypeScript annotation affects output (@​liuxingbaoyu)
• babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  • #​16440 Fix suppressed error order (@​sossost)
  • #​16408 Await nullish async disposable (@​JLHwung)

💅 Polish

• babel-parser
  • #​16407 Recover from exported using declaration (@​JLHwung)

🏠 Internal

• Other
  • #​16414 Relax ESLint peerDependency constraint to allow v9 (@​liuxingbaoyu)
• babel-parser
  • #​16425 Improve @babel/parser AST types (@​nicolo-ribaudo)
  • #​16417 Always pass type argument to .startNode (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
  • #​16439 Make NodePath<T | U> distributive (@​nicolo-ribaudo)
• babel-plugin-proposal-partial-application, babel-types
  • #​16421 Remove JSXNamespacedName from valid CallExpression args (@​nicolo-ribaudo)
• babel-plugin-transform-class-properties, babel-preset-env
  • #​16406 Do not load unnecessary Babel 7 syntax plugins in Babel 8 (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-helpers, babel-preset-env, babel-runtime-corejs3
  • #​16357 Performance: improve objectWithoutPropertiesLoose on V8 (@​romgrk)

Committers: 6

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Rom Grk (@​romgrk)
• @​liuxingbaoyu
• ynnsuis (@​sossost)

v7.24.4

Compare Source

v7.24.4 (2024-04-03)

Thanks @​Dunqing, @​luiscubal, and @​samualtnorman for your first PRs!

👓 Spec Compliance

• babel-parser
  • #​16403 Forbid initializerless using (@​JLHwung)
• babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  • #​16388 Ensure decorators are callable (@​JLHwung)

🐛 Bug Fix

• babel-generator
  • #​16402 fix: Correctly prints { [key in Bar]? } (@​liuxingbaoyu)
  • #​16394 fix: Correctly generate TSMappedType (@​liuxingbaoyu)
• babel-compat-data, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-preset-env
  • #​16390 Create bugfix plugin for classes in computed keys in Firefox (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​16387 fix: support mutated outer decorated class binding (@​JLHwung)
  • #​16385 fix: Decorators when super() exists and protoInit is not needed (@​liuxingbaoyu)
• babel-plugin-transform-block-scoping
  • #​16384 fix: Transform scoping for for X in loop (@​liuxingbaoyu)
  • #​16368 fix: Capture let when the for body is not a block (@​liuxingbaoyu)
• babel-core, babel-plugin-transform-block-scoped-functions, babel-plugin-transform-block-scoping
  • #​16363 Fix incorrect function hoisting in some case statements (@​luiscubal)

Committers: 7

• Babel Bot (@​babel-bot)
• Dunqing (@​Dunqing)
• Huáng Jùnliàng (@​JLHwung)
• Luís Reis (@​luiscubal)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• Samual Norman (@​samualtnorman)
• @​liuxingbaoyu

v7.24.1

Compare Source

v7.24.1 (2024-03-19)

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​16350 Fix decorated class computed keys ordering (@​JLHwung)
  • #​16344 Fix decorated class static field private access (@​JLHwung)
• babel-plugin-proposal-decorators, babel-plugin-proposal-json-modules, babel-plugin-transform-async-generator-functions, babel-plugin-transform-regenerator, babel-plugin-transform-runtime, babel-preset-env
  • #​16329 Respect moduleName for @babel/runtime/regenerator imports (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-class-properties
  • #​16331 Fix decorator memoiser binding kind (@​JLHwung)
• babel-helper-create-class-features-plugin, babel-helper-replace-supers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties
  • #​16325 Fix decorator evaluation private environment (@​JLHwung)

📝 Documentation

• #​16319 Update SECURITY.md (@​nicolo-ribaudo)

🏠 Internal

• babel-code-frame, babel-highlight
  • #​16359 Replace chalk with picocolors (@​nicolo-ribaudo)
• babel-helper-fixtures, babel-helpers, babel-plugin-bugfix-safari-id-destructuring-collision-in-function-expression, babel-plugin-proposal-pipeline-operator, babel-plugin-transform-unicode-sets-regex, babel-preset-env, babel-preset-flow
  • #​16352 Run Babel transform tests on old node if possible (@​JLHwung)
• babel-helper-module-imports, babel-plugin-proposal-import-wasm-source, babel-plugin-proposal-json-modules, babel-plugin-proposal-record-and-tuple, babel-plugin-transform-react-jsx-development, babel-plugin-transform-react-jsx
  • #​16349 Support merging imports in import injector (@​nicolo-ribaudo)
• Other
  • #​16332 Test Babel 7 plugins compatibility with Babel 8 core (@​nicolo-ribaudo)

🔬 Output optimization

• babel-helper-replace-supers, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-parameters, babel-plugin-transform-runtime
  • #​16345 Optimize the use of assertThisInitialized after super() (@​liuxingbaoyu)
• babel-plugin-transform-class-properties, babel-plugin-transform-classes
  • #​16343 Use simpler assertThisInitialized more often (@​liuxingbaoyu)
• babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-object-rest-spread, babel-traverse
  • #​16342 Consider well-known and registered symbols as literals (@​nicolo-ribaudo)
• babel-core, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-proposal-function-bind, babel-plugin-transform-class-properties, babel-plugin-transform-classes, babel-plugin-transform-flow-comments, babel-plugin-transform-flow-strip-types, babel-plugin-transform-function-name, babel-plugin-transform-modules-systemjs, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx, babel-plugin-transform-runtime, babel-plugin-transform-spread, babel-plugin-transform-typescript, babel-preset-env
  • #​16326 Reduce the use of class names (@​liuxingbaoyu)

Committers: 4

• Babel Bot (@​babel-bot)
• Huáng Jùnliàng (@​JLHwung)
• Nicolò Ribaudo (@​nicolo-ribaudo)
• @​liuxingbaoyu

babel/babel (@​babel/types)

v7.24.7

Compare Source

🐛 Bug Fix

• babel-node
  • #​16554 Allow extra flags in babel-node (@​nicolo-ribaudo)
• babel-traverse
  • #​16522 fix: incorrect constantViolations with destructuring (@​liuxingbaoyu)
• babel-helper-transform-fixture-test-runner, babel-plugin-proposal-explicit-resource-management
  • #​16524 fix: Transform using in switch correctly (@​liuxingbaoyu)

🏠 Internal

• babel-helpers, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16525 Delete unused array helpers (@​blakewilson)

v7.24.6

Compare Source

🐛 Bug Fix

• babel-helper-create-class-features-plugin, babel-plugin-transform-class-properties
  • #​16514 Fix source maps for private member expressions (@​nicolo-ribaudo)
• babel-core, babel-generator, babel-plugin-transform-modules-commonjs
  • #​16515 Fix source maps for template literals (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-plugin-proposal-decorators
  • #​16485 Support undecorated static accessor in anonymous classes (@​JLHwung)
  • #​16484 Fix decorator bare yield await (@​JLHwung)
• babel-helpers, babel-plugin-proposal-decorators, babel-runtime-corejs3
  • #​16483 Fix: throw TypeError if addInitializer is called after finished (@​JLHwung)
• babel-parser, babel-plugin-transform-typescript
  • #​16476 fix: Correctly parse cls.fn<C> = x (@​liuxingbaoyu)

🏠 Internal

• babel-core, babel-helpers, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16501 Generate helper metadata at build time (@​nicolo-ribaudo)
• babel-helpers
  • #​16499 Add tsconfig.json for @babel/helpers/src/helpers (@​nicolo-ribaudo)
• babel-cli, babel-helpers, babel-plugin-external-helpers, babel-plugin-proposal-decorators, babel-plugin-transform-class-properties, babel-plugin-transform-modules-commonjs, babel-plugin-transform-modules-systemjs, babel-plugin-transform-runtime, babel-preset-env, babel-runtime-corejs2, babel-runtime-corejs3, babel-runtime
  • #​16495 Move all runtime helpers to individual files (@​nicolo-ribaudo)
• babel-parser, babel-traverse
  • #​16482 Statically generate boilerplate for bitfield accessors (@​nicolo-ribaudo)
• Other
  • #​16466 Migrate import assertions syntax (@​JLHwung)

v7.24.5

Compare Source

🐛 Bug Fix

• babel-plugin-transform-classes, babel-traverse
  • #​16377 fix: TypeScript annotation affects output (@​liuxingbaoyu)
• babel-helpers, babel-plugin-proposal-explicit-resource-management, babel-runtime-corejs3
  • #​16440 Fix suppressed error order (@​sossost)
  • #​16408 Await nullish async disposable (@​JLHwung)

💅 Polish

• babel-parser
  • #​16407 Recover from exported using declaration (@​JLHwung)

🏠 Internal

• Other
  • #​16414 Relax ESLint peerDependency constraint to allow v9 (@​liuxingbaoyu)
• babel-parser
  • #​16425 Improve @babel/parser AST types (@​nicolo-ribaudo)
  • #​16417 Always pass type argument to .startNode (@​nicolo-ribaudo)
• babel-helper-create-class-features-plugin, babel-helper-member-expression-to-functions, babel-helper-module-transforms, babel-helper-split-export-declaration, babel-helper-wrap-function, babel-helpers, babel-plugin-bugfix-firefox-class-in-computed-class-key, babel-plugin-proposal-explicit-resource-management, babel-plugin-transform-block-scoping, babel-plugin-transform-destructuring, babel-plugin-transform-object-rest-spread, babel-plugin-transform-optional-chaining, babel-plugin-transform-parameters, babel-plugin-transform-private-property-in-object, babel-plugin-transform-react-jsx-self, babel-plugin-transform-typeof-symbol, babel-plugin-transform-typescript, babel-traverse
  • #​16439 Make NodePath<T | U> distributive (@​nicolo-ribaudo)
• babel-plugin-proposal-partial-application, babel-types
  • #​16421 Remove JSXNamespacedName from valid CallExpression args (@​nicolo-ribaudo)
• babel-plugin-transform-class-properties, babel-preset-env
  • #​16406 Do not load unnecessary Babel 7 syntax plugins in Babel 8 (@​nicolo-ribaudo)

🏃‍♀️ Performance

• babel-helpers, babel-preset-env, babel-runtime-corejs3
  • #​16357 Performance: improve objectWithoutPropertiesLoose on V8 (@​romgrk)

sxzz/eslint-config (@​sxzz/eslint-config)

v3.12.1

Compare Source

   🐞 Bug Fixes

• Types  -  by @​sxzz (81741)
• Interop unused imports  -  by @​sxzz (1d974)

    View changes on GitHub

v3.12.0

Compare Source

   🚀 Features

• Upgrade eslint-define-config  -  by @​sxzz (3e659)
• Sort isolatedDeclarations  -  by @​sxzz (831a2)
• unicorn: Enable new rules  -  by @​sxzz (5fa70)

   🐞 Bug Fixes

• deps:
  • Update dependency eslint-define-config to v2  -  by @​renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/499 (826a9)
  • Update dependency eslint-plugin-unicorn to v53  -  by @​renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/800 (fc5c3)
  • Update all non-major dependencies  -  by @​renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/811 (52a3d)
  • Update dependency eslint-plugin-unused-imports to v4  -  by @​renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/822 (1a35b)

    View changes on GitHub

v3.11.0

Compare Source

   🚀 Features

• Add eslint-plugin-command  -  by @​sxzz (43efe)

    View changes on GitHub

v3.10.1

Compare Source

   🐞 Bug Fixes

• Disable some unicron rules  -  by @​sxzz (e6985)

    View changes on GitHub

v3.10.0

Compare Source

   🚨 Breaking Changes

• Drop cjs package  -  by @​sxzz (50628)

   🐞 Bug Fixes

• deps:
  • Update dependency eslint-plugin-n to v17  -  by @​renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/744 (75096)
  • Update dependency eslint-plugin-markdown to v5  -  by @​renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/766 (7fc96)

    View changes on GitHub

v3.9.1

Compare Source

   🚀 Features

• Disable no-return-await  -  by @​sxzz (53669)

    View changes on GitHub

v3.9.0

Compare Source

Minor Changes

• Replace eslint-plugin-i with eslint-plugin-import-x for supporting ESLint v9.

---

   🚀 Features

• unicorn: Enable promise lint  -  by @​sxzz (46458)

   🐞 Bug Fixes

• deps:
  • Update dependency globals to v15  -  by @​renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/700 (6f282)
  • Update dependency eslint-plugin-unicorn to v52  -  by @​renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/722 (66574)

    View changes on GitHub

v3.8.7

Compare Source

   🐞 Bug Fixes

• Disable import global node modules in markdown  -  by @​sxzz (400ad)
• deps: Update dependency eslint-plugin-markdown to v4  -  by @​renovate[bot] inhttps://github.com/sxzz/eslint-config/issues/699 (fbc38)

    View changes on GitHub

sxzz/prettier-config (@​sxzz/prettier-config)

v2.0.2

Compare Source

sxzz/ast-kit (ast-kit)

v0.12.2

Compare Source

   🚀 Features

• extract: Add extractIdentifiers  -  by @​LoTwT and @​sxzz in https://github.com/sxzz/ast-kit/issues/39 (412bb)

   🐞 Bug Fixes

• deps:
  • Update all non-major dependencies  -  by @​renovate[bot] inhttps://github.com/sxzz/ast-kit/issues/388 (7bf98)
  • Update all non-major dependencies  -  by @​renovate[bot] (60ce0)
  • Update all non-major dependencies  -  by @​renovate[bot] (7f50a)
  • Update all non-major dependencies  -  by @​renovate[bot] (52898)
  • Update all non-major dependencies  -  by @​renovate[bot] (ad275)

    View changes on GitHub

antfu/bumpp (bumpp)

v9.4.1

Compare Source

rich-harris/magic-string (magic-string)

v0.30.10

Compare Source

Bug Fixes

• types: improve chainable types (#​278) (072188f)

v0.30.9

Compare Source

Performance Improvements

• avoid create uncessary overrides for replace (a1b857c)

pnpm/pnpm (pnpm)

v8.15.8

Compare Source

v8.15.7

Compare Source

v8.15.6

Compare Source

Patch Changes

• The exit code of the child process should be preserved on pnpm run #​7817.
• When sorting packages in a workspace, take into account workspace dependencies specified as peerDependencies #​7813.
• Add --ignore-scripts argument to prune command #​7836.

Platinum Sponsors

Gold Sponsors

Silver Sponsors

v8.15.5

Compare Source

prettier/prettier (prettier)

v3.3.1

Compare Source

diff

Preserve empty lines in front matter (#​16347 by @​fisker)

<!-- Input -->
---
foo:
  - bar1

  - bar2

  - bar3
---
Markdown

<!-- Prettier 3.3.0 -->

---
foo:
  - bar1
  - bar2
  - bar3
---

Markdown

<!-- Prettier 3.3.1 -->
---
foo:
  - bar1

  - bar2

  - bar3
---

Markdown

Preserve explicit language in front matter (#​16348 by @​fisker)

<!-- Input -->
---yaml
title: Hello
slug: home
---

<!-- Prettier 3.3.0 -->
---
title: Hello
slug: home
---

<!-- Prettier 3.3.1 -->
---yaml
title: Hello
slug: home
---

Avoid line breaks in import attributes (#​16349 by @​fisker)

// Input
import something from "./some-very-very-very-very-very-very-very-very-long-path.json" with { type: "json" };

// Prettier 3.3.0
import something from "./some-very-very-very-very-very-very-very-very-long-path.json" with { type:
  "json" };

// Prettier 3.3.1
import something from "./some-very-very-very-very-very-very-very-very-long-path.json" with { type: "json" };

v3.3.0

Compare Source

diff

🔗 Release Notes

egoist/tsup (tsup)

v8.1.0

Compare Source

Features

• upgrade esbuild to 0.21.4, opts-in for decorators (#​1116) (796fc50)

privatenumber/tsx (tsx)

v4.12.0

Compare Source

v4.11.2

Compare Source

v4.11.1

Compare Source

v4.11.0

Compare Source

Bug Fixes

• only error on invalid tsconfig if explicitly passed in (#​30) (b6bf39b)

Features

• esm api: configurable tsconfig ([3f42ae3]

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[stackblitz]

Run & review this pull request in StackBlitz Codeflow.

[socket-security]

New and removed dependencies detected. Learn more about Socket for GitHub ↗︎

Package	New capabilities	Transitives	Size	Publisher
npm/@babel/[email protected]	None	0	0 B
npm/@babel/[email protected]	None	0	0 B
npm/@types/[email protected]	None	0	0 B
npm/[email protected]	None	+1	118 kB	sxzz
npm/[email protected]	environment, filesystem, unsafe Transitive: network, shell	+69	6.89 MB	antfu
npm/[email protected]	None	+1	498 kB	antfu
npm/[email protected]	None	0	0 B
npm/[email protected]	None	0	0 B
npm/[email protected]	None	0	32.4 MB	typescript-bot

🚮 Removed packages: npm/@babel/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected], npm/[email protected]

View full report↗︎

[socket-security]

🚨 Potential security issues detected. Learn more about Socket for GitHub ↗︎

To accept the risk, merge this PR and you will not be notified again.

Alert	Package	Note
Install scripts	npm/[email protected]	Install script: postinstall Source: node install.js

View full report↗︎

Next steps

What is an install script?

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

• @SocketSecurity ignore npm/[email protected]