@cloudinary/html - npm Package Compare versions

Comparing version 1.6.0 to 1.7.0

CHANGELOG.md

@@ -0,1 +1,17 @@
+1.7.0 / 2022-12-12
+==================
+
+Html
+-------
+  * Add an optional analytics option to be passed to serverSideSrc
+
+React
+-------
+  * use the same analytics token in React SSR and CSR
+
+Vue
+-------
+  * Package @cloudinary/vue3 was renamed to @cloudinary/vue
+
+
 1.6.0 / 2022-11-17
@@ -2,0 +18,0 @@ ==================

layers/htmlImageLayer.js

@@ -0,1 +1,12 @@
+var __assign = (this && this.__assign) || function () {
+    __assign = Object.assign || function(t) {
+        for (var s, i = 1, n = arguments.length; i < n; i++) {
+            s = arguments[i];
+            for (var p in s) if (Object.prototype.hasOwnProperty.call(s, p))
+                t[p] = s[p];
+        }
+        return t;
+    };
+    return __assign.apply(this, arguments);
+};
 import cloneDeep from 'lodash.clonedeep';
@@ -12,9 +23,7 @@ import { render } from '../utils/render.js';
             _this.htmlPluginState.pluginEventSubscription.forEach(function (fn) { fn(); });
-            _this.imgElement.setAttribute('src', pluginCloudinaryImage.toURL({
-                trackedAnalytics: {
+            _this.imgElement.setAttribute('src', pluginCloudinaryImage.toURL(__assign({}, analyticsOptions && { trackedAnalytics: {
                     sdkCode: analyticsOptions.sdkCode,
                     sdkSemver: analyticsOptions.sdkSemver,
                     techVersion: analyticsOptions.techVersion,
-                }
-            }));
+                } })));
         });
@@ -33,9 +42,7 @@ }
             .then(function () {
-            _this.imgElement.setAttribute('src', pluginCloudinaryImage.toURL({
-                trackedAnalytics: {
+            _this.imgElement.setAttribute('src', pluginCloudinaryImage.toURL(__assign({}, analyticsOptions && { trackedAnalytics: {
                     sdkCode: analyticsOptions.sdkCode,
                     sdkSemver: analyticsOptions.sdkSemver,
                     techVersion: analyticsOptions.techVersion,
-                }
-            }));
+                } })));
         });
@@ -42,0 +49,0 @@ };

package.json

 {
   "name": "@cloudinary/html",
-  "version": "1.6.0",
+  "version": "1.7.0",
   "description": "An HTML wrapper for Cloudinary",
@@ -5,0 +5,0 @@ "main": "./index.js",

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1157167

1.64%

Lines of code

11856

0.16%

Worsened metrics

Number of low supply chain risk alerts

51

6.25%

No dependency changes