@bonniernews/local-esi - npm Package Compare versions

Comparing version 2.3.1 to 2.4.0

lib/expression/evaluate.js

@@ -5,2 +5,3 @@ /* eslint-disable camelcase */
 const crypto = require("crypto");
+const ent = require("ent");
 
@@ -34,2 +35,8 @@ class Evaluator {
   }
+  html_decode([ arg ]) {
+    const string = this.execute(arg.type, arg);
+    if (!string) return "";
+
+    return ent.decode(string);
+  }
   digest_md5([ arg ]) {
@@ -36,0 +43,0 @@ const string = this.execute(arg.type, arg);

package.json

 {
   "name": "@bonniernews/local-esi",
-  "version": "2.3.1",
+  "version": "2.4.0",
   "description": "Local Edge Side Includes parser",
@@ -48,3 +48,6 @@ "main": "index.js",
     "test": "test"
+  },
+  "dependencies": {
+    "ent": "^2.2.0"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Lines of code

1683

increased by0.36%

Worsened metrics

Total package byte prevSize

54437

decreased by-2.93%

Dependency count

3

increased by50%

Number of package files

16

decreased by-5.88%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedent@^2.2.0

• + Addedcall-bind-apply-helpers@1.0.1(transitive)

• + Addedcall-bound@1.0.3(transitive)

• + Addeddunder-proto@1.0.1(transitive)

• + Addedent@2.2.2(transitive)

• + Addedes-define-property@1.0.1(transitive)

• + Addedes-errors@1.3.0(transitive)

• + Addedes-object-atoms@1.0.0(transitive)

• + Addedfunction-bind@1.1.2(transitive)

• + Addedget-intrinsic@1.2.6(transitive)

• + Addedgopd@1.2.0(transitive)

• + Addedhas-symbols@1.1.0(transitive)

• + Addedhas-tostringtag@1.0.2(transitive)

• + Addedhasown@2.0.2(transitive)

• + Addedis-regex@1.2.1(transitive)

• + Addedmath-intrinsics@1.1.0(transitive)

• + Addedpunycode@1.4.1(transitive)

• + Addedsafe-regex-test@1.1.0(transitive)