flat - npm Package Compare versions

Comparing version 2.0.1 to 2.0.2

index.js

@@ -75,2 +75,3 @@ var isBuffer = require('is-buffer')
     while (key2 !== undefined) {
+      if (key1 === '__proto__') { return }
       var type = Object.prototype.toString.call(recipient[key1])
@@ -77,0 +78,0 @@ var isobject = (

package.json

 {
   "name": "flat",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "main": "index.js",
@@ -5,0 +5,0 @@ "scripts": {

test/test.js

@@ -420,2 +420,16 @@ var assert = require('assert')
   })
+
+  test('should not pollute prototype', function () {
+      unflatten({
+          '__proto__.polluted': true
+      });
+      unflatten({
+          'prefix.__proto__.polluted': true
+      });
+      unflatten({
+          'prefix.0.__proto__.polluted': true
+      });
+
+      assert.notStrictEqual({}.polluted, true);
+  })
 })
@@ -422,0 +436,0 @@

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

18577

increased by1.91%

Lines of code

523

increased by2.55%

Number of high maintenance alerts

0

decreased by-100%

Worsened metrics

Number of package files

6

decreased by-14.29%

No dependency changes