evaljs - npm Package Compare versions

Comparing version 1.0.1 to 1.0.2

index.js

@@ -9,3 +9,3 @@ "use strict";
 
-var parse = require('acorn/acorn_csp').parse;
+var parse = require('acorn').parse;
 
@@ -12,0 +12,0 @@ function noop() {}

package.json

 {
   "name": "evaljs",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "A JavaScript interpreter written in JavaScript",
@@ -8,10 +8,10 @@ "main": "index.js",
   "dependencies": {
-    "acorn": "^0.11.0"
+    "acorn": "^4.0.4"
   },
   "devDependencies": {
-    "browserify": "^8.1.1",
-    "esprima": "^1.2.3",
-    "is-optimizable": "^1.1.0",
-    "jshint": "^2.5.11",
-    "uglify-js": "^2.4.16"
+    "browserify": "^13.1.1",
+    "esprima": "^3.1.2",
+    "is-optimizable": "^1.1.1",
+    "jshint": "^2.9.4",
+    "uglify-js": "^2.7.5"
   },
@@ -18,0 +18,0 @@ "scripts": {

test.js

@@ -5,3 +5,3 @@ "use strict";
 var fs = require('fs');
-var parse = require('acorn/acorn_csp').parse;
+var parse = require('acorn').parse;
 
@@ -28,3 +28,3 @@ // basic
 // acorn.js
-var code = fs.readFileSync(require.resolve('acorn/acorn_csp'), {encoding: 'UTF-8'});
+var code = fs.readFileSync(require.resolve('acorn'), {encoding: 'UTF-8'});
 var env = new evaljs.Environment([global, {exports: {}, module: {}}]);
@@ -37,3 +37,3 @@ //env.DEBUG = true;
 // parse file
-var parsed = env.gen('exports.parse("1 + 1")')();
+var parsed = env.gen('exports.parse("1+1")')();
 // for bonus points: run the parsed expression
@@ -40,0 +40,0 @@ console.log(env.gen(parsed)());

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

High entropy strings

Supply chain risk

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

High entropy strings

Supply chain risk

Contains high entropy strings. This could be a sign of encrypted data, leaked secrets or obfuscated code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

283740

increased by50.5%

Number of package files

13

increased by18.18%

Lines of code

5902

increased by54.3%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedacorn@4.0.13(transitive)

• - Removedacorn@0.11.0(transitive)

• Updatedacorn@^4.0.4