env2 - npm Package Compare versions

Comparing version 2.0.6 to 2.0.7

lib/env.js

@@ -77,4 +77,4 @@ var fs   = require('fs');
 function add_dot_env_line_to_json (json, env_variable) {
-  var environment_parts = env_variable.replace('export','').split('=').map(trim);
-  json[environment_parts[0]] = environment_parts[1];
+  var environment_parts = env_variable.replace('export','').split('=');
+  json[environment_parts[0].trim()] = environment_parts.slice(1).join('=').trim();
   return json;
@@ -81,0 +81,0 @@ }

package.json

 {
   "name": "env2",
-  "version": "2.0.6",
+  "version": "2.0.7",
   "description": "Environment Variable Loader",
@@ -5,0 +5,0 @@ "keywords": [

test/env.test.js

@@ -86,2 +86,8 @@ var test    = require('tape');
 
+test("A .env file with equals in the variable value works", function (t) {
+  require('../lib/env')(dotenv);
+  t.equal(process.env.KEY_WITH_EQUALS, 'http://foo.bar/?baz=quux', 'values with "=" work!');
+  t.end();
+});
+
 test("An .env file with spaces in the definition should work", function (t) {
@@ -88,0 +94,0 @@ var new_env = fs.createWriteStream(newenv);

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

35311

0.79%

Lines of code

232

2.2%

Worsened metrics

Number of low supply chain risk alerts

34

3.03%

Number of medium supply chain risk alerts

1

Infinity%

No dependency changes