bonzo - npm Package Compare versions

Comparing version 1.3.4 to 1.3.5

package.json

 {
     "name": "bonzo"
   , "description": "Library agnostic, extensible DOM utility"
-  , "version": "1.3.4"
+  , "version": "1.3.5"
   , "homepage": "https://github.com/ded/bonzo"
@@ -6,0 +6,0 @@ , "author": "Dustin Diaz <[e-mail]> (http://dustindiaz.com)"

src/bonzo.js

@@ -932,3 +932,3 @@ (function (name, context, definition) {
     , val: function (s) {
-        return (typeof s == 'string') ?
+        return (typeof s == 'string' || typeof s == 'number') ?
           this.attr('value', s) :
@@ -935,0 +935,0 @@ this.length ? this[0].value : null

tests/attributes-test.js

@@ -124,3 +124,3 @@ /*global sink:true start:true Q:true dom:true $:true bowser:true ender:true*/
 
-  test('setting & getting attributes', 10, function () {
+  test('setting & getting attributes', function (done) {
     ok($('a#twitter').attr('href') == 'http://twitter.com/', 'retrieves "href" attribute from anchor')
@@ -141,2 +141,6 @@ ok($('a#hrefrel').attr('href') == '/relative', 'retrieves relative "href" attribute from anchor')
     ok(input.val() == 'eyoeyo', 'val(val) can set value on input')
+    input.val(1234)
+    ok(input.val() == '1234', 'val(val) can set number value on input')
+
+    done()
   })
@@ -143,0 +147,0 @@

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

379351

0.03%

Lines of code

8123

0.04%

No dependency changes