can-compile - npm Package Compare versions

Comparing version 0.3.2 to 0.4.0

lib/compile.js

@@ -12,2 +12,3 @@ 'use strict';
         'http://canjs.com/release/' + version + '/can.jquery.js',
+        'http://canjs.com/release/' + version + '/can.ejs.js',
         'http://canjs.com/release/' + version + '/can.view.mustache.js' ],
@@ -14,0 +15,0 @@ function (error, win) {

package.json

 {
   "name": "can-compile",
   "description": "Compile CanJS Mustache and EJS views for lightning fast production apps",
-  "version": "0.3.2",
+  "version": "0.4.0",
   "homepage": "http://daffl.github.com/can-compile",
@@ -6,0 +6,0 @@ "author": {

readme.md

@@ -47,5 +47,3 @@ # can-compile
         out: 'production/views.production.js',
-        options: {
-          wrapper: '!function() { {{{content}}} }();'
-        }
+        wrapper: '!function() { {{{content}}} }();'
       },
@@ -55,5 +53,3 @@ legacy: {
         out: 'production/views.production.js',
-        options: {
-          version: '1.1.2'
-        }
+        version: '1.1.2'
       }
@@ -137,5 +133,3 @@ },
         out: 'production/views.production.js',
-        options: {
-          wrapper: 'define(["can/view/mustache"], function(can) { {{{content}}} });'
-        }
+        wrapper: 'define(["can/view/mustache"], function(can) { {{{content}}} });'
       }
@@ -157,2 +151,6 @@ }
 
+__0.4.0:__
+
+- Verify CanJS 2.0.0 compatbility, load can.EJS which isn't in the core anymore
+
 __0.3.2:__
@@ -159,0 +157,0 @@

test/test.js

@@ -33,6 +33,12 @@ /*global describe, it */
       "___v1ew.push(\"</h2>\");; return ___v1ew.join('')}} })"
+  },
+
+  '2.0.0': {
+    ejs: "can.EJS(function(_CONTEXT,_VIEW) { with(_VIEW) { with (_CONTEXT) {var ___v1ew = [];___v1ew.push(\n\"<h2>\");___v1ew.push(\ncan.view.txt(\n1,\n'h2',\n0,\nthis,\nfunction(){ return  message }));\n___v1ew.push(\n\"</h2>\");; return ___v1ew.join('')}} })",
+
+    mustache: "can.Mustache(function(scope,options) { var ___v1ew = [];___v1ew.push(\n\"<h2>\");___v1ew.push(\ncan.view.txt(\n1,\n'h2',\n0,\nthis,\nfunction(){ return can.Mustache.txt(\n{scope:scope,options:options},\nnull,{get:\"message\"})}));\n___v1ew.push(\n\"</h2>\");; return ___v1ew.join('') })"
   }
 };
 
-expected['latest'] = expected['1.1.5'];
+expected['latest'] = expected['2.0.0'];
 
@@ -39,0 +45,0 @@ var normalizer = function (filename) {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Improved metrics

Number of low license alerts

0

decreased by-100%

Number of low supply chain risk alerts

2

decreased by-92%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

277221

decreased by-74.23%

Number of package files

37

decreased by-84.9%

Lines of code

5124

decreased by-74.8%

Number of lines in readme file

180

decreased by-1.1%

No dependency changes