@bonniernews/local-esi - npm Package Compare versions

Comparing version 1.2.2 to 1.2.3

lib/markup.js

@@ -49,6 +49,9 @@ "use strict";
       return `${attributes} ${key}`;
+    } else if (value.indexOf("\"") > -1) {
+      attributes += ` ${key}="${value.replace(/"/g, """)}"`;
+    } else {
+      attributes += ` ${key}="${value}"`;
     }
-    attributes += ` ${key}="${value}"`;
     return attributes;
   }, "");
 }

package.json

 {
   "name": "@bonniernews/local-esi",
-  "version": "1.2.2",
+  "version": "1.2.3",
   "description": "Local Edge Side Includes parser",
@@ -24,3 +24,3 @@ "main": "index.js",
   "dependencies": {
-    "atlas-html-stream": "^1.2.0",
+    "atlas-html-stream": "git://github.com/BonnierNews/atlas-html-stream.git",
     "pump": "^3.0.0",
@@ -27,0 +27,0 @@ "pumpify": "^2.0.1",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

50139

increased by0.34%

Lines of code

1579

increased by0.19%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Number of high supply chain risk alerts

1

increased byInfinity%

Dependency changes

• - Removedatlas-html-stream@1.2.0(transitive)

• - Removedatlas-seq-matcher@1.0.2(transitive)

• Updatedatlas-html-stream@git://github.com/BonnierNews/atlas-html-stream.git