chai - npm Package Compare versions

Comparing version 4.1.1 to 4.1.2

lib/chai.js

@@ -13,3 +13,3 @@ /*!
 
-exports.version = '4.1.1';
+exports.version = '4.1.2';
 
@@ -16,0 +16,0 @@ /*!

lib/chai/utils/addProperty.js

@@ -39,3 +39,3 @@ /*!
 module.exports = function addProperty(ctx, name, getter) {
-  getter = getter === undefined ? new Function() : getter;
+  getter = getter === undefined ? function () {} : getter;
 
@@ -42,0 +42,0 @@ Object.defineProperty(ctx, name,

package.json

@@ -20,3 +20,3 @@ {
   ],
-  "version": "4.1.1",
+  "version": "4.1.2",
   "repository": {
@@ -39,3 +39,3 @@ "type": "git",
     "check-error": "^1.0.1",
-    "deep-eql": "^2.0.1",
+    "deep-eql": "^3.0.0",
     "get-func-name": "^2.0.0",
@@ -42,0 +42,0 @@ "pathval": "^1.0.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

726965

decreased by-2.14%

Lines of code

18177

decreased by-1.99%

Dependency changes

• + Addeddeep-eql@3.0.1(transitive)

• - Removeddeep-eql@2.0.2(transitive)

• - Removedtype-detect@3.0.0(transitive)

• Updateddeep-eql@^3.0.0