fix: raise node engine requirement to 14.18

[foxfirecodes]

closes #825

rollup themselves have this as the engine requirement: https://github.com/rollup/rollup/blob/f125345413ea686003fb4f4c650a79c321372d45/package.json#L156

this is necessary bc 14.18.0 is when support for node:-prefixed imports was added, which are now apparently included in the rollup bundle 😅

(source)

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated
tsup	✅ Ready (Inspect)	Visit Preview	💬 Add your feedback	Feb 11, 2023 at 6:24AM (UTC)

[socket-security]

Socket Security Pull Request Report

Dependency issues detected. If you merge this pull request, you will not be alerted to the instances of these issues again.

📜 Install scripts

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Packages should not be running non-essential scripts during install and there are often solutions to problems people solve with install scripts that can be run at publish time instead.

Package	Script field	Source
@swc/[email protected] (upgraded)	postinstall	package.json via [email protected]
[email protected] (upgraded)	postinstall	package.json via [email protected]

Pull request report summary

Issue	Status
Install scripts	⚠️ 2 issues
Native code	✅ 0 issues
Bin script confusion	✅ 0 issues
Bin script shell injection	✅ 0 issues
Unresolved require	✅ 0 issues
Invalid package.json	✅ 0 issues
HTTP dependency	✅ 0 issues
Git dependency	✅ 0 issues
Potential typo squat	✅ 0 issues
Known Malware	✅ 0 issues
Telemetry	✅ 0 issues
Protestware/Troll package	✅ 0 issues

Bot Commands

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of package-name@version specifiers. e.g. @SocketSecurity ignore [email protected] [email protected]

• @SocketSecurity ignore @swc/[email protected]
• @SocketSecurity ignore [email protected]

⚠️ Please accept the latest app permissions to ensure bot commands work properly. Accept the new permissions here.

Powered by socket.dev

[github-actions]

🎉 This PR is included in version 6.6.3 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀