New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

@dotenvx/dotenvx

Package Overview
Dependencies
Maintainers
0
Versions
189
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@dotenvx/dotenvx - npm Package Compare versions

Comparing version 1.24.4 to 1.24.5

8

CHANGELOG.md

@@ -5,4 +5,10 @@ # Changelog

[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.24.4...main)
[Unreleased](https://github.com/dotenvx/dotenvx/compare/v1.24.5...main)
## [1.24.5](https://github.com/dotenvx/dotenvx/compare/v1.24.4...v1.24.5)
### Changed
* 🐞 do not expand prior literal values ([#458](https://github.com/dotenvx/dotenvx/pull/458))
## [1.24.4](https://github.com/dotenvx/dotenvx/compare/v1.24.3...v1.24.4)

@@ -9,0 +15,0 @@

2

package.json
{
"version": "1.24.4",
"version": "1.24.5",
"name": "@dotenvx/dotenvx",

@@ -4,0 +4,0 @@ "description": "a better dotenv–from the creator of `dotenv`",

@@ -23,2 +23,4 @@ const chomp = require('./chomp')

this.runningParsed = {}
// for use with stopping expansion for literals
this.literals = {}
}

@@ -62,2 +64,6 @@

if (quote === "'") {
this.literals[key] = this.parsed[key]
}
// for use with progressive expansion

@@ -167,3 +173,2 @@ this.runningParsed[key] = this.parsed[key]

let value
const key = r.shift()

@@ -190,2 +195,7 @@

// if the result came from what was a literal value then stop expanding
if (this.literals[key]) {
break
}
regex.lastIndex = 0 // reset regex search position to re-evaluate after each replacement

@@ -192,0 +202,0 @@ }

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc