apostrophe-tumblr - npm Package Compare versions

Comparing version 0.5.9 to 0.5.10

index.js

@@ -45,3 +45,3 @@ var feedparser = require('feedparser');
     if (!url.match(/^https?\:\/\//)) {
-      url = 'http://' + url;
+      url = 'https://' + url;
     }
@@ -81,2 +81,5 @@ return url;
 
+    // Worth doing, but tumblr will redirect us right back to http: ):
+    item.url = item.url.replace(/^http\:/, 'https:');
+
     feedparser.parseUrl(item.url+'/rss').on('complete', function(meta, articles) {
@@ -87,3 +90,4 @@ articles = articles.slice(0, item.limit);
       item._entries = articles.map(function(article) {
-
+        // Force HTTPS, tumblr's images and videos will work that way
+        article.description = article.description.replace(/src="http\:(.*?)"/g, 'src="https\:$1"');
         return {
@@ -90,0 +94,0 @@ title: article.title,

package.json

 {
   "name": "apostrophe-tumblr",
-  "version": "0.5.9",
+  "version": "0.5.10",
   "description": "Adds a Tumblr RSS widget to the Apostrophe content management system",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12156

increased by2.5%

Lines of code

222

increased by1.83%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes