Skip to content

This release fixes issues for SREs watching stability and regressions.

Published 1mo Build & Package
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Affected surfaces

rce_ssrf

Summary

AI summary

Fixed dynamic import evaluation to preserve static resolver behavior and provide clear missing-module errors.

Full changelog

Fixed

  • Fixed dynamic import() evaluation by routing ImportExpression through the configured moduleResolver.
  • Dynamic imports now preserve static import resolver behavior, including importer fromPath, resolved-path caching, native module exports, computed specifiers, and clear missing-module errors.
  • Added detailed regression coverage for dynamic import success and failure paths.

Fixes #19.

Verification

  • npm test
  • npm run build
  • npm pack --dry-run --json

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track JSLike, a CSP-Safe Interpreter for JS, TS, JSX, TSX in JS

Get notified when new releases ship.

Sign up free

About JSLike, a CSP-Safe Interpreter for JS, TS, JSX, TSX in JS

All releases →

Related context

Beta — feedback welcome: [email protected]