@exodus/zod 3.24.1-rc.3 → 3.24.1-rc.5

package/LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020 Colin McDonnell
+Copyright (c) 2025 Exodus Movement, Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

package/lib/index.mjs

@@ -49,6 +49,7 @@ var objectUtil;
 (function (objectUtil) {
     objectUtil.mergeShapes = (first, second) => {
         return {
+            __proto__: null,
             ...first,
             ...second, // second overwrites first
         };
@@ -235,7 +236,7 @@ class ZodError extends Error {
         this.issues = [...this.issues, ...subs];
     };
     flatten(mapper = (issue) => issue.message) {
-        const fieldErrors = {};
+        const fieldErrors = Object.create(null);
         const formErrors = [];
         for (const sub of this.issues) {
             if (sub.path.length > 0) {
@@ -464,7 +465,7 @@ class ParseStatus {
         return ParseStatus.mergeObjectSync(status, syncPairs);
     }
     static mergeObjectSync(status, pairs) {
-        const finalObject = {};
+        const finalObject = Object.create(null);
         for (const pair of pairs) {
             const { key, value } = pair;
             if (key.status === "aborted")
@@ -475,7 +476,7 @@ class ParseStatus {
                 status.dirty();
             if (value.status === "dirty")
                 status.dirty();
-            if (key.value !== "__proto__" &&
+            if (!(key.value in Object.prototype) &&
                 (typeof value.value !== "undefined" || pair.alwaysSet)) {
                 finalObject[key.value] = value.value;
             }
@@ -545,7 +546,7 @@ const handleResult = (ctx, result) => {
 };
 function processCreateParams(params) {
     if (!params)
-        return {};
+        return Object.create(null);
     const { errorMap, invalid_type_error, required_error, description } = params;
     if (errorMap && (invalid_type_error || required_error)) {
         throw new Error(`Can't use "invalid_type_error" or "required_error" in conjunction with custom error map.`);
@@ -2351,7 +2352,7 @@ class ZodArray extends ZodType {
 }
 function deepPartialify(schema) {
     if (schema instanceof ZodObject) {
-        const newShape = {};
+        const newShape = Object.create(null);
         for (const key in schema.shape) {
             const fieldSchema = schema.shape[key];
             newShape[key] = ZodOptional.create(deepPartialify(fieldSchema));
@@ -2502,7 +2503,7 @@ class ZodObject extends ZodType {
                         };
                     },
                 }
-                : {}),
+                : Object.create(null)),
         });
     }
     strip() {
@@ -2638,7 +2639,7 @@ class ZodObject extends ZodType {
     //   return merged;
     // }
     setKey(key, schema) {
-        return this.augment({ [key]: schema });
+        return this.augment(Object.assign(Object.create(null), { [key]: schema }));
     }
     // merge<Incoming extends AnyZodObject>(
     //   merging: Incoming
@@ -2668,7 +2669,7 @@ class ZodObject extends ZodType {
         });
     }
     pick(mask) {
-        const shape = {};
+        const shape = Object.create(null);
         util.objectKeys(mask).forEach((key) => {
             if (mask[key] && this.shape[key]) {
                 shape[key] = this.shape[key];
@@ -2680,7 +2681,7 @@ class ZodObject extends ZodType {
         });
     }
     omit(mask) {
-        const shape = {};
+        const shape = Object.create(null);
         util.objectKeys(this.shape).forEach((key) => {
             if (!mask[key]) {
                 shape[key] = this.shape[key];
@@ -2698,7 +2699,7 @@ class ZodObject extends ZodType {
         return deepPartialify(this);
     }
     partial(mask) {
-        const newShape = {};
+        const newShape = Object.create(null);
         util.objectKeys(this.shape).forEach((key) => {
             const fieldSchema = this.shape[key];
             if (mask && !mask[key]) {
@@ -2714,7 +2715,7 @@ class ZodObject extends ZodType {
         });
     }
     required(mask) {
-        const newShape = {};
+        const newShape = Object.create(null);
         util.objectKeys(this.shape).forEach((key) => {
             if (mask && !mask[key]) {
                 newShape[key] = this.shape[key];
@@ -3002,7 +3003,7 @@ function mergeValues(a, b) {
         const sharedKeys = util
             .objectKeys(a)
             .filter((key) => bKeys.indexOf(key) !== -1);
-        const newObj = { ...a, ...b };
+        const newObj = { __proto__: null, ...a, ...b };
         for (const key of sharedKeys) {
             const sharedValue = mergeValues(a[key], b[key]);
             if (!sharedValue.valid) {
@@ -3573,21 +3574,21 @@ class ZodEnum extends ZodType {
         return this._def.values;
     }
     get enum() {
-        const enumValues = {};
+        const enumValues = Object.create(null);
         for (const val of this._def.values) {
             enumValues[val] = val;
         }
         return enumValues;
     }
     get Values() {
-        const enumValues = {};
+        const enumValues = Object.create(null);
         for (const val of this._def.values) {
             enumValues[val] = val;
         }
         return enumValues;
     }
     get Enum() {
-        const enumValues = {};
+        const enumValues = Object.create(null);
         for (const val of this._def.values) {
             enumValues[val] = val;
         }
@@ -4069,7 +4070,7 @@ class ZodReadonly extends ZodType {
         return this._def.innerType;
     }
 }
-function custom(check, params = {}, 
+function custom(check, params = Object.create(null), 
 /**
  * @deprecated
  *

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "@exodus/zod",
-  "version": "3.24.1-rc.3",
-  "author": "Colin McDonnell <colin@colinhacks.com>",
+  "version": "3.24.1-rc.5",
+  "author": "Exodus Movement, Inc.",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/colinhacks/zod.git"
+    "url": "git+https://github.com/ExodusMovement/zod.git"
   },
   "type": "module",
   "module": "./lib/index.mjs",
@@ -23,8 +23,6 @@
     "@typescript-eslint/eslint-plugin": "^5.15.0",
     "@typescript-eslint/parser": "^5.15.0",
     "babel-jest": "^29.5.0",
-    "benchmark": "^2.1.4",
-    "dependency-cruiser": "^9.19.0",
     "eslint": "^8.11.0",
     "eslint-config-prettier": "^8.5.0",
     "eslint-plugin-ban": "^1.6.0",
@@ -55,7 +53,7 @@
     "./package.json": "./package.json"
   },
   "bugs": {
-    "url": "https://github.com/colinhacks/zod/issues"
+    "url": "https://github.com/ExodusMovement/zod/issues"
   },
   "description": "TypeScript-first schema declaration and validation library with static type inference",
   "files": [
@@ -63,8 +61,6 @@
     "/index.d.ts",
     "!/lib/benchmarks"
   ],
-  "funding": "https://github.com/sponsors/colinhacks",
-  "homepage": "https://zod.dev",
   "keywords": [
     "typescript",
     "schema",
@@ -101,12 +97,7 @@
     "test:vitest": "npx vitest --config ./configs/vitest.config.ts",
     "test:ts-jest": "npx jest --config ./configs/ts-jest.config.json",
     "test:swc": "npx jest --config ./configs/swc-jest.config.json",
-    "prepublishOnly": "npm run test && npm run build",
-    "play": "nodemon -e ts -w . -x tsx playground.ts",
-    "depcruise": "depcruise -c .dependency-cruiser.js src",
-    "benchmark": "tsx src/benchmarks/index.ts",
-    "prepare": "husky install",
-    "docs": "netlify dev"
+    "prepublishOnly": "npm run test && npm run build"
   },
   "sideEffects": false,
   "support": {