get-intrinsic - npm Package Compare versions

Comparing version 1.0.2 to 1.1.0

index.js

@@ -5,6 +5,3 @@ 'use strict';
 	AggregateError,
-	Atomics,
-	FinalizationRegistry,
 	SharedArrayBuffer,
-	WeakRef,
 */
@@ -21,4 +18,3 @@
 	try {
-		// eslint-disable-next-line no-new-func
-		return Function('"use strict"; return (' + expressionSyntax + ').constructor;')();
+		return $Function('"use strict"; return (' + expressionSyntax + ').constructor;')();
 	} catch (e) {}
@@ -60,5 +56,3 @@ };
 
-var asyncGenFunction = getEvalledConstructor('async function* () {}');
-var asyncGenFunctionPrototype = asyncGenFunction ? asyncGenFunction.prototype : undefined;
-var asyncGenPrototype = asyncGenFunctionPrototype ? asyncGenFunctionPrototype.prototype : undefined;
+var needsEval = {};
 
@@ -73,6 +67,6 @@ var TypedArray = typeof Uint8Array === 'undefined' ? undefined : getProto(Uint8Array);
 	'%AsyncFromSyncIteratorPrototype%': undefined,
-	'%AsyncFunction%': getEvalledConstructor('async function () {}'),
-	'%AsyncGenerator%': asyncGenFunctionPrototype,
-	'%AsyncGeneratorFunction%': asyncGenFunction,
-	'%AsyncIteratorPrototype%': asyncGenPrototype ? getProto(asyncGenPrototype) : undefined,
+	'%AsyncFunction%': needsEval,
+	'%AsyncGenerator%': needsEval,
+	'%AsyncGeneratorFunction%': needsEval,
+	'%AsyncIteratorPrototype%': needsEval,
 	'%Atomics%': typeof Atomics === 'undefined' ? undefined : Atomics,
@@ -94,3 +88,3 @@ '%BigInt%': typeof BigInt === 'undefined' ? undefined : BigInt,
 	'%Function%': $Function,
-	'%GeneratorFunction%': getEvalledConstructor('function* () {}'),
+	'%GeneratorFunction%': needsEval,
 	'%Int8Array%': typeof Int8Array === 'undefined' ? undefined : Int8Array,
@@ -136,2 +130,27 @@ '%Int16Array%': typeof Int16Array === 'undefined' ? undefined : Int16Array,
 
+var doEval = function doEval(name) {
+	var value;
+	if (name === '%AsyncFunction%') {
+		value = getEvalledConstructor('async function () {}');
+	} else if (name === '%GeneratorFunction%') {
+		value = getEvalledConstructor('function* () {}');
+	} else if (name === '%AsyncGeneratorFunction%') {
+		value = getEvalledConstructor('async function* () {}');
+	} else if (name === '%AsyncGenerator%') {
+		var fn = doEval('%AsyncGeneratorFunction%');
+		if (fn) {
+			value = fn.prototype;
+		}
+	} else if (name === '%AsyncIteratorPrototype%') {
+		var gen = doEval('%AsyncGenerator%');
+		if (gen) {
+			value = getProto(gen.prototype);
+		}
+	}
+
+	INTRINSICS[name] = value;
+
+	return value;
+};
+
 var LEGACY_ALIASES = {
@@ -227,2 +246,5 @@ '%ArrayBufferPrototype%': ['ArrayBuffer', 'prototype'],
 		var value = INTRINSICS[intrinsicName];
+		if (value === needsEval) {
+			value = doEval(intrinsicName);
+		}
 		if (typeof value === 'undefined' && !allowMissing) {
@@ -229,0 +251,0 @@ throw new $TypeError('intrinsic ' + name + ' exists, but is not available. Please file an issue!');

package.json

 {
 	"name": "get-intrinsic",
-	"version": "1.0.2",
+	"version": "1.1.0",
 	"description": "Get and robustly cache all JS language-level intrinsics at first require time",
@@ -17,3 +17,3 @@ "main": "index.js",
 		"pretest": "npm run lint",
-		"tests-only": "nyc tape 'test/*'",
+		"tests-only": "nyc tape 'test/**/*.js'",
 		"test": "npm run tests-only",
@@ -47,8 +47,9 @@ "posttest": "aud --production",
 	"devDependencies": {
-		"@ljharb/eslint-config": "^17.3.0",
+		"@ljharb/eslint-config": "^17.5.0",
 		"aud": "^1.1.3",
 		"auto-changelog": "^2.2.1",
-		"es-abstract": "^1.18.0-next.1",
+		"call-bind": "^1.0.2",
+		"es-abstract": "^1.18.0-next.2",
 		"es-value-fixtures": "^1.0.0",
-		"eslint": "^7.15.0",
+		"eslint": "^7.18.0",
 		"foreach": "^2.0.5",
@@ -61,3 +62,3 @@ "has-bigints": "^1.0.1",
 		"object-inspect": "^1.9.0",
-		"tape": "^5.0.1"
+		"tape": "^5.1.1"
 	},
@@ -64,0 +65,0 @@ "auto-changelog": {

test/GetIntrinsic.js

@@ -12,3 +12,3 @@ 'use strict';
 
-var callBound = require('es-abstract/helpers/callBound');
+var callBound = require('call-bind/callBound');
 var v = require('es-value-fixtures');
@@ -217,3 +217,3 @@ var $gOPD = require('es-abstract/helpers/getOwnPropertyDescriptor');
 
-test('async generator functions', { skip: !asyncGenFns.length }, function (t) {
+test('async generator functions', { skip: asyncGenFns.length === 0 }, function (t) {
 	var $AsyncGeneratorFunction = GetIntrinsic('%AsyncGeneratorFunction%');
@@ -234,1 +234,30 @@ var $AsyncGeneratorFunctionPrototype = GetIntrinsic('%AsyncGenerator%');
 });
+
+test('%ThrowTypeError%', function (t) {
+	var $ThrowTypeError = GetIntrinsic('%ThrowTypeError%');
+
+	t.equal(typeof $ThrowTypeError, 'function', 'is a function');
+	t['throws'](
+		$ThrowTypeError,
+		TypeError,
+		'%ThrowTypeError% throws a TypeError'
+	);
+
+	t.end();
+});
+
+test('allowMissing', { skip: asyncGenFns.length > 0 }, function (t) {
+	t['throws'](
+		function () { GetIntrinsic('%AsyncGeneratorPrototype%'); },
+		TypeError,
+		'throws when missing'
+	);
+
+	t.equal(
+		GetIntrinsic('%AsyncGeneratorPrototype%', true),
+		undefined,
+		'does not throw when allowMissing'
+	);
+
+	t.end();
+});

Fixed alerts

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Lines of code

515

increased by8.88%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

29482

decreased by-68.26%

Dev dependency count

15

increased by7.14%

Number of package files

10

decreased by-23.08%

No dependency changes