engine - npm Package Compare versions

Comparing version 0.1.7 to 0.1.8

index.js

@@ -32,2 +32,3 @@ /**
   }
+
   this.options = options || {};
@@ -50,5 +51,5 @@ this.init(this.options);
   // regex
-  opts.escape = utils.reEscape;
-  opts.evaluate = utils.reEvaluate;
-  opts.interpolate = utils.reInterpolate;
+  opts.escape = opts.escape || utils.reEscape;
+  opts.evaluate = opts.evaluate || utils.reEvaluate;
+  opts.interpolate = opts.interpolate || utils.reInterpolate;
 
@@ -55,0 +56,0 @@ // register helpers

package.json

 {
   "name": "engine",
   "description": "Template engine based on Lo-Dash template, but adds features like the ability to register helpers and more easily set data to be used as context in templates.",
-  "version": "0.1.7",
+  "version": "0.1.8",
   "homepage": "https://github.com/jonschlinkert/engine",
@@ -6,0 +6,0 @@ "author": "Jon Schlinkert (https://github.com/jonschlinkert)",

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

20749

0.26%

No dependency changes