canvas-native - npm Package Compare versions

Comparing version 2.3.2 to 2.3.3

dist/lib/types/image.js

@@ -71,3 +71,3 @@ 'use strict';
     get: function get() {
-      return this.meta.url;
+      return this.meta.url || '';
     }
@@ -77,3 +77,7 @@ }, {
     get: function get() {
-      return JSON.parse(this.match[2]);
+      try {
+        return JSON.parse(this.match[2]);
+      } catch (e) {
+        return {};
+      }
     }
@@ -80,0 +84,0 @@ }], [{

lib/types/image.js

@@ -6,7 +6,12 @@ import Type     from './type';
   get content() {
-    return this.meta.url;
+    return this.meta.url || '';
   }
 
   get meta() {
-    return JSON.parse(this.match[2]);
+    try {
+      return JSON.parse(this.match[2]);
+    }
+    catch(e) {
+      return {};
+    }
   }
@@ -13,0 +18,0 @@

package.json

 {
   "name": "canvas-native",
   "description": "Utilities for working with the native Canvas format",
-  "version": "2.3.2",
+  "version": "2.3.3",
   "author": "Jonathan Clem <[e-mail]>",
@@ -6,0 +6,0 @@ "bugs": "https://github.com/usecanvas/canvas-native/issues",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

123406

increased by0.1%

Lines of code

3483

increased by0.26%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes