abl-utils - npm Package Compare versions

Comparing version 1.0.6 to 1.0.7

package.json

 {
   "name": "abl-utils",
   "title": "ABL - utils",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "license": "MIT",
@@ -25,4 +25,4 @@ "description": "description",
   "dependencies": {
-    "abl-constants": "git+ssh://github.com/bucket-list/constants.git#v0.3.5",
-    "abl-lang": "git+ssh://github.com/bucket-list/lang.git#v0.3.15",
+    "abl-constants": "git+ssh://github.com/bucket-list/constants.git#v0.3.7",
+    "abl-lang": "git+ssh://github.com/bucket-list/lang.git#v0.3.17",
     "debug": "2.2.0",
@@ -29,0 +29,0 @@ "lodash": "4.11.2",

source/error.js

 "use strict";
 
 import {translate} from "abl-lang";
+import {tpl} from "./misc";
 
@@ -13,4 +14,4 @@
 
-export function makeError(key, user, code = 400) {
-	return _makeError(translate(key, user), code);
+export function makeError(key, user, code = 400, data = {}) {
+	return _makeError(tpl(translate(key, user), data), code);
 }

source/misc.js

 "use strict";
 
 import configs from "./configs/config";
+import {getObject} from "abl-lang/build/index";
 
@@ -26,1 +27,5 @@
 }
+
+export function tpl(template, data) {
+	return template.replace(/(\$\{([^\{\}]+)\})/g, ($0, $1, $2) => getObject($2, data));
+}

New alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 2 instances in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 2 instances in 1 package

Fixed alerts

Git dependency

Supply chain risk

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable and can be used to inject untrusted code or reduce the likelihood of a reproducible install.

Found 2 instances in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

8254

increased by2.8%

Lines of code

180

increased by2.86%

Dependency changes

• Updatedabl-constants@git+ssh://github.com/bucket-list/constants.git#v0.3.7

• Updatedabl-lang@git+ssh://github.com/bucket-list/lang.git#v0.3.17