Build: tsup to build vite-builder

[ndelangen]

Related: #18732

What I did

Migrated the vite-builder to be build with TSup

[IanVS]

I don't think we can leave vite in devDependencies or it will be prebundled.

[ndelangen]

@IanVS it's in both, therefore not pre-bundled.

[IanVS]

Thanks, what is the purpose of keeping it in devDependencies if it is also in dependencies?

Norbert explained to me that we might want to keep a more broad version range in dependencies, but a more up-to-date version for devDependencies. For now they're the same, but we can change that another time.

[socket-security]

Socket Security Pull Request Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

😵‍💫 Bin script confusion

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack

Consider removing one of the conflicting packages. Packages should only export bin scripts with their name

Package	Bin script	Source
[email protected] (added)	webdriver-manager	code/frameworks/angular/package.json via @angular-devkit/[email protected]
[email protected] (added)	webdriver-manager	code/frameworks/angular/package.json via @angular-devkit/[email protected], [email protected]

Pull request report summary

Issue	Status
Install scripts	✅ 0 issues
Native code	✅ 0 issues
Bin script confusion	⚠️ 2 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] [email protected]

• @SocketSecurity ignore [email protected]
• @SocketSecurity ignore [email protected]

⚠️ Please accept the latest app permissions to ensure bot commands work properly. Accept the new permissions here.

Powered by socket.dev