flat - npm Package Compare versions

Comparing version 1.6.1 to 1.6.2

index.js

@@ -79,2 +79,3 @@ var isBuffer = require('is-buffer')
     while (key2 !== undefined) {
+      if (key1 === '__proto__') { return }
       var type = Object.prototype.toString.call(recipient[key1])
@@ -81,0 +82,0 @@ var isobject = (

package.json

 {
   "name": "flat",
-  "version": "1.6.1",
+  "version": "1.6.2",
   "main": "index.js",
@@ -5,0 +5,0 @@ "scripts": {

test/test.js

@@ -391,2 +391,16 @@ var assert = require('assert')
   })
+
+  test('should not pollute prototype', function () {
+      unflatten({
+          '__proto__.polluted': true
+      });
+      unflatten({
+          'prefix.__proto__.polluted': true
+      });
+      unflatten({
+          'prefix.0.__proto__.polluted': true
+      });
+
+      assert.notStrictEqual({}.polluted, true);
+  })
 })
@@ -393,0 +407,0 @@

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

17019

increased by2.09%

Lines of code

496

increased by2.69%

Number of high maintenance alerts

0

decreased by-100%

Worsened metrics

Number of package files

6

decreased by-14.29%

No dependency changes