@stoplight/json-ref-resolver - npm Package Compare versions

Comparing version 3.0.1 to 3.0.2

package.json

 {
   "name": "@stoplight/json-ref-resolver",
-  "version": "3.0.1",
+  "version": "3.0.2",
   "description": "Recursively resolve JSON pointers and remote authorities.",
@@ -5,0 +5,0 @@ "keywords": [

runner.js

@@ -227,3 +227,16 @@ "use strict";
             if (jsonPointer && jsonPointer !== '#' && jsonPointer !== '#/') {
-                targetPath = json_1.pointerToPath(jsonPointer);
+                try {
+                    targetPath = json_1.pointerToPath(jsonPointer);
+                }
+                catch (_a) {
+                    resolved.errors.push({
+                        code: 'PARSE_POINTER',
+                        message: `'${jsonPointer}' JSON pointer is invalid`,
+                        uri: this.baseUri,
+                        uriStack: this.uriStack,
+                        pointerStack: [],
+                        path: [],
+                    });
+                    return resolved;
+                }
                 resolved.result = lodash_1.get(resolved.result, targetPath);
@@ -230,0 +243,0 @@ }

types.d.ts

@@ -76,3 +76,3 @@ /// <reference types="urijs" />
 }
-export declare type ResolverErrorCode = 'POINTER_MISSING' | 'RESOLVE_URI' | 'PARSE_URI' | 'RESOLVE_POINTER' | 'TRANSFORM_DEREFERENCED';
+export declare type ResolverErrorCode = 'POINTER_MISSING' | 'RESOLVE_URI' | 'PARSE_URI' | 'RESOLVE_POINTER' | 'PARSE_POINTER' | 'TRANSFORM_DEREFERENCED';
 export interface IResolveError {
@@ -79,0 +79,0 @@ code: ResolverErrorCode;

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

79348

increased by0.99%

Lines of code

883

increased by1.49%

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes