@bugsnag/core - npm Package Compare versions

Comparing version 7.19.0 to 7.22.7

lib/metadata-delegate.js

@@ -17,2 +17,7 @@ const assign = require('./es-utils/assign')
 
+  // preventing the __proto__ property from being used as a key
+  if (section === '__proto__' || section === 'constructor' || section === 'prototype') {
+    return
+  }
+
   // ensure a section with this name exists
@@ -45,2 +50,7 @@ if (!state[section]) state[section] = {}
 
+  // preventing the __proto__ property from being used as a key
+  if (section === '__proto__' || section === 'constructor' || section === 'prototype') {
+    return
+  }
+
   // clear a single value from a section
@@ -47,0 +57,0 @@ if (state[section]) {

package.json

 {
   "name": "@bugsnag/core",
   "main": "index.js",
-  "version": "7.19.0",
+  "version": "7.22.7",
   "types": "types/index.d.ts",
@@ -29,3 +29,3 @@ "description": "Core classes and utilities for Bugsnag notifiers",
   },
-  "gitHead": "95d2c3dd978e7dc5a6fda5664cfa9cf437b03b76"
+  "gitHead": "644e54464cb8994fbf033867b30b59373a56925d"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

86523

increased by0.39%

Lines of code

2305

increased by0.35%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Published versions last year

17

decreased by-5.56%

No dependency changes