flat - npm Package Compare versions

Comparing version 3.0.0 to 3.0.1

index.js

@@ -76,2 +76,3 @@ var isBuffer = require('is-buffer')
     while (key2 !== undefined) {
+      if (key1 === '__proto__') { return }
       var type = Object.prototype.toString.call(recipient[key1])
@@ -78,0 +79,0 @@ var isobject = (

package.json

 {
   "name": "flat",
-  "version": "3.0.0",
+  "version": "3.0.1",
   "main": "index.js",
@@ -5,0 +5,0 @@ "scripts": {

test/test.js

@@ -448,2 +448,16 @@ var assert = require('assert')
   })
+
+  test('should not pollute prototype', function () {
+      unflatten({
+          '__proto__.polluted': true
+      });
+      unflatten({
+          'prefix.__proto__.polluted': true
+      });
+      unflatten({
+          'prefix.0.__proto__.polluted': true
+      });
+
+      assert.notStrictEqual({}.polluted, true);
+  })
 })
@@ -450,0 +464,0 @@

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

19319

increased by1.84%

Lines of code

549

increased by2.43%

Number of high maintenance alerts

0

decreased by-100%

Worsened metrics

Number of package files

6

decreased by-14.29%

No dependency changes