bedrock-did-context - npm Package Compare versions

Comparing version 2.0.0 to 2.0.1

CHANGELOG.md

 # bedrock-did-context ChangeLog
 
+## 2.0.1 - 2021-09-15
+
+### Fixed
+- Restrict constant import to constants containing 'URL'.
+
 ## 2.0.0 - 2021-03-31
@@ -4,0 +9,0 @@

lib/index.js

@@ -16,6 +16,8 @@ /*!
   for(const c in contextConstants) {
-    const contextUrl = contextConstants[c];
-    bedrockConstants[c] = contextUrl;
-    jsonLdDocumentLoader.addStatic(contextUrl, contexts.get(contextUrl));
+    if(c.includes('URL')) {
+      const contextUrl = contextConstants[c];
+      bedrockConstants[c] = contextUrl;
+      jsonLdDocumentLoader.addStatic(contextUrl, contexts.get(contextUrl));
+    }
   }
 }

package.json

 {
   "name": "bedrock-did-context",
-  "version": "2.0.0",
+  "version": "2.0.1",
   "description": "DID Context (Bedrock module)",
@@ -5,0 +5,0 @@ "license": "SEE LICENSE IN LICENSE.md",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

7388

increased by1.82%

Lines of code

24

increased by9.09%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes