appuri-loader-transform
Advanced tools
Comparing version 0.1.0 to 0.2.0
@@ -13,5 +13,5 @@ const through2 = require('through2'), | ||
module.exports = function (loaderTransform, validateLoaderEvents) { | ||
module.exports = function (loaderTransform, userTransform, validateLoaderEvents) { | ||
let recordCount = 0, invalidEvents = 0 | ||
const transformFn = process.env.TRANSFORM_FN && new Function(`return (${process.env.TRANSFORM_FN}).apply(this, arguments)`) | ||
const transformFn = userTransform && new Function(`return (${userTransform}).apply(this, arguments)`) | ||
@@ -18,0 +18,0 @@ return through2.obj(function (chunk, enc, cb) { |
{ | ||
"name": "appuri-loader-transform", | ||
"version": "0.1.0", | ||
"version": "0.2.0", | ||
"description": "Client for the Appuri Event API", | ||
@@ -36,2 +36,2 @@ "main": "index.js", | ||
} | ||
} | ||
} |
@@ -14,6 +14,2 @@ const chai = require('chai'), | ||
describe('transform stream', function() { | ||
beforeEach(function() { | ||
delete process.env.TRANSFORM_FN | ||
}) | ||
it('should work without a transform function, validating events when requested', function() { | ||
@@ -42,3 +38,3 @@ return ['bob:login', 'jane:!!', 'jill:login'] | ||
return ['a', 'b', 'c'] | ||
.transform(x => 'You said ' + x, false) | ||
.transform(x => 'You said ' + x, null, false) | ||
.should.eventually.deep.equal([ | ||
@@ -54,7 +50,2 @@ 'You said a', | ||
global.calls = [] | ||
process.env.TRANSFORM_FN = function(r, e) { | ||
global.calls.push(Array.prototype.slice.call(arguments)) | ||
e.user_id = 'name:' + e.user_id | ||
return e | ||
}.toString() | ||
@@ -69,3 +60,7 @@ return ['bob:login', 'jane:!!', 'jill:login'] | ||
} | ||
}) | ||
}, function(r, e) { | ||
global.calls.push(Array.prototype.slice.call(arguments)) | ||
e.user_id = 'name:' + e.user_id | ||
return e | ||
}.toString()) | ||
.should.eventually.deep.equal([{ | ||
@@ -97,3 +92,3 @@ entype: 'user', | ||
return ['a', 'b', 'c'] | ||
.transform(x => 'You said ' + x, false) | ||
.transform(x => 'You said ' + x, null, false) | ||
.then(function() { | ||
@@ -100,0 +95,0 @@ console.log = origLog |
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
0
6299
126