command-line-usage - npm Package Compare versions

Comparing version 5.0.3 to 5.0.4

lib/chalk-format.js

 const chalk = require('chalk')
 
+function format (str) {
+  return chalk(Object.assign([], { raw: [ str ] }))
+}
+
 function chalkFormat (str) {
   str = str.replace(/`/g, '\\`')
-  const format = new Function('chalk', `'use strict'; return chalk\`${str}\``)
-  return format(chalk)
+  return format(str)
 }
 
 module.exports = chalkFormat

package.json

 {
   "name": "command-line-usage",
   "author": "Lloyd Brookes <[e-mail]>",
-  "version": "5.0.3",
+  "version": "5.0.4",
   "description": "Generates command-line usage information",
@@ -6,0 +6,0 @@ "repository": "https://github.com/75lb/command-line-usage.git",

Fixed alerts

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Lines of code

318

increased by0.63%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

25888

decreased by-0.01%

No dependency changes