dry-underscore - npm Package Compare versions

Comparing version 0.23.4 to 0.23.5

lib/common.test.js

@@ -979,2 +979,11 @@ "use strict";
 
+test('property_ne_error', function(){
+
+    var records = [{ a: 'a'}];
+
+    records = _.filter(records, function(a){ 
+        return _.prop_ne("ignore", true)(a);
+    });
+});
+
 test("property_comparer", function(){
@@ -981,0 +990,0 @@ var comp = _.propertyComparer("z");

package.json

 {
     "name": "dry-underscore",
-    "version": "0.23.4",
+    "version": "0.23.5",
     "main": "./index/node.index.js",
@@ -33,3 +33,3 @@ "description": "The DRY Underscore Library",
     "dependencies": {
-        "deep-diff": "^0.3.8",
+        "deep-diff": "^0.3.3",
         "formidable": "",
@@ -36,0 +36,0 @@ "handlebars": "",

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

1981617

0.69%

Lines of code

24143

0.24%

Worsened metrics

Number of medium supply chain risk alerts

8

14.29%

Dependency changes

• Updated

  deep-diff@^0.3.3