copy-props - npm Package Compare versions

Comparing version 2.0.4 to 2.0.5

index.js

 'use strict';
 
 var eachProps = require('each-props');
-var isPlainObject = require('is-plain-object');
+var isPlainObject = require('is-plain-object').isPlainObject;
 
@@ -187,2 +187,6 @@ module.exports = function(src, dst, fromto, converter, reverse) {
   var key = keyElems.shift();
+  if (isPossibilityOfPrototypePollution(key)) {
+    return;
+  }
+
   if (!keyElems.length) {
@@ -228,1 +232,5 @@ var value = valueCreator(obj, key, depth);
 }
+
+function isPossibilityOfPrototypePollution(key) {
+  return (key === '__proto__' || key === 'constructor');
+}

package.json

 {
   "name": "copy-props",
-  "version": "2.0.4",
+  "version": "2.0.5",
   "description": "Copy properties deeply between two objects.",
@@ -21,3 +21,3 @@ "main": "index.js",
     "type": "git",
-    "url": "git+https://github.com/sttk/copy-props.git"
+    "url": "git+https://github.com/gulpjs/copy-props.git"
   },
@@ -32,21 +32,22 @@ "keywords": [
   ],
-  "author": "Takayuki Sato",
+  "author": "Gulp Team <[e-mail]> (https://gulpjs.com/)",
   "license": "MIT",
   "bugs": {
-    "url": "https://github.com/sttk/copy-props/issues"
+    "url": "https://github.com/gulpjs/copy-props/issues"
   },
-  "homepage": "https://github.com/sttk/copy-props#readme",
+  "homepage": "https://github.com/gulpjs/copy-props#readme",
   "dependencies": {
-    "each-props": "^1.3.0",
-    "is-plain-object": "^2.0.1"
+    "each-props": "^1.3.2",
+    "is-plain-object": "^5.0.0"
   },
   "devDependencies": {
-    "browserify": "^16.2.2",
+    "browserify": "^16.5.2",
     "chai": "^3.5.0",
-    "coveralls": "^3.0.1",
-    "eslint": "^4.19.1",
-    "mocha": "^3.2.0",
-    "nyc": "^11.7.2",
-    "uglify-js": "^3.3.24"
+    "coveralls": "^3.1.0",
+    "eslint": "^7.9.0",
+    "eslint-config-gulp": "^5.0.1",
+    "mocha": "^3.5.3",
+    "nyc": "^15.1.0",
+    "uglify-js": "^3.10.4"
   }
 }

README.md

@@ -212,3 +212,3 @@ # [copy-props][repo-url] [![NPM][npm-img]][npm-url] [![MIT License][mit-img]][mit-url] [![Build Status][travis-img]][travis-url] [![Build Status][appveyor-img]][appveyor-url] [![Coverage Status][coverage-img]][coverage-url]
 
-Copyright (C) 2016-2018 Takayuki Sato
+Copyright (C) 2016-2021 Gulp Team.
 
@@ -218,12 +218,12 @@ This program is free software under [MIT][mit-url] License.
 
-[repo-url]: https://github.com/sttk/copy-props/
-[npm-img]: https://img.shields.io/badge/npm-v2.0.4-blue.svg
+[repo-url]: https://github.com/gulpjs/copy-props/
+[npm-img]: https://img.shields.io/badge/npm-v2.0.5-blue.svg
 [npm-url]: https://www.npmjs.org/package/copy-props/
 [mit-img]: https://img.shields.io/badge/license-MIT-green.svg
 [mit-url]: https://opensource.org/licenses.MIT
-[travis-img]: https://travis-ci.org/sttk/copy-props.svg?branch=master
-[travis-url]: https://travis-ci.org/sttk/copy-props
-[appveyor-img]: https://ci.appveyor.com/api/projects/status/github/sttk/copy-props?branch=master&svg=true
-[appveyor-url]: https://ci.appveyor.com/project/sttk/copy-props
-[coverage-img]: https://coveralls.io/repos/github/sttk/copy-props/badge.svg?branch=master
-[coverage-url]: https://coveralls.io/github/sttk/copy-props?branch=master
+[travis-img]: https://travis-ci.org/gulpjs/copy-props.svg?branch=master
+[travis-url]: https://travis-ci.org/gulpjs/copy-props
+[appveyor-img]: https://ci.appveyor.com/api/projects/status/github/gulpjs/copy-props?branch=master&svg=true
+[appveyor-url]: https://ci.appveyor.com/project/gulpjs/copy-props
+[coverage-img]: https://coveralls.io/repos/github/gulpjs/copy-props/badge.svg?branch=master
+[coverage-url]: https://coveralls.io/github/gulpjs/copy-props?branch=master

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

14291

increased by1.99%

Lines of code

198

increased by3.13%

Worsened metrics

Dev dependency count

8

increased by14.29%

Dependency changes

• + Addedis-plain-object@5.0.0(transitive)

• Updatedeach-props@^1.3.2

• Updatedis-plain-object@^5.0.0