bourne - npm Package Compare versions

Comparing version 1.1.1 to 1.1.2

lib/index.js

@@ -68,3 +68,3 @@ 'use strict';
         for (const node of nodes) {
-            if (node.hasOwnProperty('__proto__')) {
+            if (Object.prototype.hasOwnProperty.call(node, '__proto__')) {      // Avoid calling node.hasOwnProperty directly
                 if (options.protoAction !== 'remove') {
@@ -71,0 +71,0 @@ throw new SyntaxError('Object contains forbidden prototype property');

package.json

 {
   "name": "bourne",
   "description": "JSON parse with prototype poisoning protection",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "repository": "git://github.com/hapijs/bourne",
@@ -6,0 +6,0 @@ "main": "lib/index.js",

New alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

5472

1.37%

No dependency changes