editro - npm Package Compare versions

Comparing version 2.0.34 to 2.0.35

package.json

 {
   "name": "editro",
-  "version": "2.0.34",
+  "version": "2.0.35",
   "description": "HTML WYSIWYG editor in HTML",
@@ -27,9 +27,10 @@ "keywords": [
     "mocha-loader": "1.1.0",
-    "node-sass": "4.1.1",
-    "sass-loader": "4.1.1",
+    "node-sass": "4.13.0",
+    "sass-loader": "8.0.0",
     "style-loader": "0.13.1",
     "tern": "0.20.0",
     "url-loader": "0.5.7",
-    "webpack": "2.1.0-beta.25",
-    "webpack-dev-server": "2.1.0-beta.9"
+    "webpack": "4.30.0",
+    "webpack-cli": "3.3.2",
+    "webpack-dev-server": "3.9.0"
   },
@@ -36,0 +37,0 @@ "dependencies": {

README.md

@@ -165,3 +165,3 @@ # Editro
 ```
-/node_modules/webpack-dev-server/bin/webpack-dev-server.js --port 3003 --config webpack.dev.config.js
+./node_modules/webpack-dev-server/bin/webpack-dev-server.js --port 3003 --config webpack.dev.config.js
 ```

src/addon/codeMirror.js

 const { debounce } = require('../utils');
 
 module.exports = function(Editro, CodeMirror=window.CodeMirror) {
-  Editro.defineInitHook((editro, _, { code }) => {
+  Editro.defineInitHook((editro, _, options) => {
     const wrapper = document.createElement('div');
@@ -9,2 +9,4 @@ wrapper.style.height = '100%';
 
+    const { code, readOnly = false} = options;
+
     const bottomPanel = new Editro.type.Panel(editro, {
@@ -15,3 +17,2 @@ position: 'bottom',
     });
-
     editro.getNode().appendChild(bottomPanel.getNode());
@@ -30,3 +31,4 @@
       foldGutter: true,
-      gutters: ['CodeMirror-linenumbers', 'CodeMirror-foldgutter']
+      gutters: ['CodeMirror-linenumbers', 'CodeMirror-foldgutter'],
+      readOnly
     });
@@ -33,0 +35,0 @@

webpack.dev.config.js

@@ -36,3 +36,3 @@ const path = require('path');
   module: {
-    loaders: [
+    rules: [
       {
@@ -45,3 +45,7 @@ test: /\.js$/,
         test: /\.scss$/,
-        loaders: ['style-loader', 'css-loader', 'sass-loader'],
+        use: [
+          {loader: 'style-loader'},
+          {loader: 'css-loader'},
+          {loader: 'sass-loader'}
+        ],
         include: [ path.join(__dirname, 'scss') ]
@@ -48,0 +52,0 @@ },

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

5

decreased by-89.13%

Number of medium supply chain risk alerts

2

decreased by-60%

Worsened metrics

Total package byte prevSize

913069

decreased by-36.81%

Dev dependency count

13

increased by8.33%

Number of package files

114

decreased by-0.87%

Lines of code

11496

decreased by-70.24%

No dependency changes