bones - npm Package Compare versions

Comparing version 2.1.0alpha0 to 2.2.0

bones.js

@@ -32,3 +32,4 @@ if (global.__BonesPlugin__) {
 var Plugin = require('./server/plugin');
+global.__BonesPath__ = require.resolve('bones');
 exports.plugin = global.__BonesPlugin__ = new Plugin();
 exports.plugin.load(__dirname);

CHANGELOG.md

@@ -0,2 +1,14 @@
+## 2.2.0
 
+- Upgraded dependencies: express, optimist
+- Declared compatibility with node 0.4 and 0.6
+- Fixed: `showError` middleware no longer writes a body for error responses to
+  HEAD requests.
+- Changed: `Server.initialize()` and `Server.conclude()` are now passed all
+  arguments for the `Server()` constructor instead of just the plugin.
+- Changed: Default model routes now allow `Error()` objects passed back from
+  `Backbone.sync()` to be sent to the client.
+- Changed: Default value for `host` command option is `false`, which disables
+  host checking by default.
+
 ## Bones 2.x.x
@@ -3,0 +15,0 @@

package.json

 {
     "name": "bones",
     "description": "Framework for using backbone.js on the client and server.",
-    "version": "2.1.0alpha0",
+    "version": "2.2.0",
 
@@ -16,5 +16,5 @@ "author": {
         "underscore": "1.1.x",
-        "express": "2.5.4",
-        "backbone": "0.5.1",
-        "jquery": "1.6.x",
+        "express": "~2.5.4",
+        "backbone": "0.5.3",
+        "jquery": "~1.6.3",
         "optimist": "0.3.x",
@@ -27,3 +27,6 @@ "mirror": "0.3.x"
         "coverage": "./test/coverage.sh"
+    },
+    "engines": {
+      "node": "0.4 || 0.6"
     }
 }

server/command.js

@@ -38,4 +38,4 @@ var Backbone = require('./backbone');
         'description': 'Hostnames allowed for requests. Wildcards are allowed.',
-        'default': [ '127.0.0.1', 'localhost', require('os').hostname() ]
+        'default': false
     }
 };

server/command.prefix.js

@@ -1,2 +0,2 @@
-var Bones = require('bones');
+var Bones = require(global.__BonesPath__ || 'bones');
 
@@ -3,0 +3,0 @@ var $ = Bones.$, jQuery = $;

server/middleware.js

@@ -82,5 +82,5 @@ var env = process.env.NODE_ENV || 'development';
             if (env === 'development') {
-                res.end(JSON.stringify(err));
+                res.end('HEAD' == req.method ? null : JSON.stringify(err));
             } else {
-                res.end(JSON.stringify({ message: err.message }));
+                res.end('HEAD' == req.method ? null : JSON.stringify({ message: err.message }));
             }
@@ -90,5 +90,5 @@ } else {
             if (env === 'development') {
-                res.end(err.stack);
+                res.end('HEAD' == req.method ? null : err.stack);
             } else {
-                res.end(err.message);
+                res.end('HEAD' == req.method ? null : err.message);
             }
@@ -95,0 +95,0 @@ }

server/model.prefix.js

@@ -1,2 +0,2 @@
-var Bones = require('bones');
+var Bones = require(global.__BonesPath__ || 'bones');
 
@@ -3,0 +3,0 @@ var $ = Bones.$, jQuery = $;

server/router.prefix.js

@@ -1,2 +0,2 @@
-var Bones = require('bones');
+var Bones = require(global.__BonesPath__ || 'bones');
 
@@ -3,0 +3,0 @@ var $ = Bones.$, jQuery = $;

server/server.js

@@ -10,4 +10,4 @@ var Backbone = require('./backbone');
     this.plugin = plugin;
-    this.initialize(plugin);
-    this.conclude(plugin);
+    this.initialize.apply(this, arguments);
+    this.conclude.apply(this, arguments);
 };
@@ -14,0 +14,0 @@

server/server.prefix.js

@@ -1,2 +0,2 @@
-var Bones = require('bones');
+var Bones = require(global.__BonesPath__ || 'bones');
 
@@ -3,0 +3,0 @@ var $ = Bones.$, jQuery = $;

server/view.prefix.js

@@ -1,2 +0,2 @@
-var Bones = require('bones');
+var Bones = require(global.__BonesPath__ || 'bones');
 
@@ -3,0 +3,0 @@ var $ = Bones.$, jQuery = $;

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

191243

increased by0.57%

Number of package files

102

increased by0.99%

Lines of code

2061

increased by0.05%

Number of low quality alerts

1

decreased by-50%

Worsened metrics

Number of low supply chain risk alerts

26

increased by23.81%

Dependency changes

• + Addedbackbone@0.5.3(transitive)

• + Addedexpress@2.5.11(transitive)

• + Addedmime@1.2.4(transitive)

• + Addedmkdirp@0.3.0(transitive)

• + Addedqs@0.4.2(transitive)

• + Addedws@8.17.0(transitive)

• - Removedbackbone@0.5.1(transitive)

• - Removedcall-bind@1.0.7(transitive)

• - Removeddefine-data-property@1.1.4(transitive)

• - Removedes-define-property@1.0.0(transitive)

• - Removedes-errors@1.3.0(transitive)

• - Removedexpress@2.5.4(transitive)

• - Removedfunction-bind@1.1.2(transitive)

• - Removedget-intrinsic@1.2.4(transitive)

• - Removedgopd@1.0.1(transitive)

• - Removedhas-property-descriptors@1.0.2(transitive)

• - Removedhas-proto@1.0.3(transitive)

• - Removedhas-symbols@1.0.3(transitive)

• - Removedhasown@2.0.2(transitive)

• - Removedmime@4.0.3(transitive)

• - Removedmkdirp@0.0.7(transitive)

• - Removedobject-inspect@1.13.2(transitive)

• - Removedqs@6.12.1(transitive)

• - Removedset-function-length@1.2.2(transitive)

• - Removedside-channel@1.0.6(transitive)

• - Removedws@8.17.1(transitive)

• Updatedbackbone@0.5.3

• Updatedexpress@~2.5.4

• Updatedjquery@~1.6.3