futoin-invoker - npm Package Compare versions

Comparing version 1.5.1 to 1.5.3

CHANGELOG.txt

 
+=== 1.5.3 (2017-09-04) ===
+FIXED: added workaround for NPM: https://github.com/npm/npm/issues/16723
+
+=== 1.5.2 (2017-09-04) ===
+SECURITY: fixed ignored "elemtype" of map, if "fields" is not set
+FIXED: to allow "null" as value of "any" typed field in "map"
+
 === 1.5.1 (2017-09-03) ===
@@ -3,0 +10,0 @@ BREAKING: "any" is not allowed to be "undefined" anymore

futoin.json

 {
   "name": "futoin-invoker",
-  "version": "1.5.1",
+  "version": "1.5.3",
   "vcs": "git",
@@ -5,0 +5,0 @@ "rms": "npm",

package.json

 {
   "name": "futoin-invoker",
-  "version": "1.5.1",
+  "version": "1.5.3",
   "description": "FutoIn Invoker - Reference Implementation. Transparently and efficiently invoke remote or local service methods with strict API definition for Node and Browser",
@@ -5,0 +5,0 @@ "main": "lib/invoker.js",

SpecTools.js

@@ -1220,6 +1220,7 @@ "use strict";
 
-                if ( 'elemtype' in tdef )
+                //--
+                elemtype = tdef.elemtype;
+
+                if ( typeof elemtype !== 'undefined' )
                 {
-                    elemtype = tdef.elemtype;
-
                     for ( var i = 0; i < val_len; ++i )
@@ -1238,40 +1239,36 @@ {
             case 'map':
-                if ( !( 'fields' in tdef ) )
-                {
-                    return true;
-                }
-
                 var fields = tdef.fields;
 
-                for ( var f in fields )
+                if ( typeof fields !== 'undefined' )
                 {
-                    var field_def = fields[ f ];
-
-                    if ( typeof field_def === 'string' )
+                    for ( var f in fields )
                     {
-                        field_def = { type : field_def };
-                    }
+                        var field_def = fields[ f ];
 
-                    if ( !( f in val ) ||
-                             ( val[ f ] === null ) )
-                    {
-                        if ( field_def.optional )
+                        if ( typeof field_def === 'string' )
                         {
-                            val[ f ] = null;
-                            return true;
+                            field_def = { type : field_def };
                         }
 
-                        return false;
-                    }
+                        if ( !( f in val ) ||
+                                ( val[ f ] === null ) )
+                        {
+                            if ( field_def.optional )
+                            {
+                                val[ f ] = null;
+                                return true;
+                            }
+                        }
 
-                    if ( !this._checkType( info, field_def.type, val[ f ], null ) )
-                    {
-                        return false;
+                        if ( !this._checkType( info, field_def.type, val[ f ], null ) )
+                        {
+                            return false;
+                        }
                     }
                 }
 
-                if ( 'elemtype' in tdef )
+                elemtype = tdef.elemtype;
+
+                if ( typeof elemtype !== 'undefined' )
                 {
-                    elemtype = tdef.elemtype;
-
                     for ( var ft in val )
@@ -1278,0 +1275,0 @@ {

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

2

decreased by-33.33%

Number of medium supply chain risk alerts

2

decreased by-33.33%

Worsened metrics

Total package byte prevSize

368421

decreased by-37.95%

Number of package files

30

decreased by-26.83%

Lines of code

4664

decreased by-44.61%

No dependency changes