gray-matter - npm Package Compare versions

Comparing version 2.0.1 to 2.0.2

index.js

@@ -118,3 +118,3 @@ 'use strict';
 
-var YAML = matter.parsers.requires.yaml || (matter.parsers.requires.yaml = require('./lib/js-yaml'));
+var YAML = matter.parsers.requires.yaml || (matter.parsers.requires.yaml = require('js-yaml'));
 
@@ -121,0 +121,0 @@ /**

lib/parsers.js

@@ -42,3 +42,3 @@ /*!
   try {
-    var YAML = parser.requires.yaml || (parser.requires.yaml = require('./js-yaml'));
+    var YAML = parser.requires.yaml || (parser.requires.yaml = require('js-yaml'));
     return opts.safeLoad ? YAML.safeLoad(str, options) : YAML.load(str, options);
@@ -45,0 +45,0 @@ } catch (err) {

package.json

 {
   "name": "gray-matter",
   "description": "Parse front-matter from a string or file. Fast, reliable and easy to use. Parses YAML front matter by default, but also has support for YAML, JSON, TOML or Coffee Front-Matter, with options to set custom delimiters. Used by metalsmith, assemble, verb and many other projects.",
-  "version": "2.0.1",
+  "version": "2.0.2",
   "homepage": "https://github.com/jonschlinkert/gray-matter",
@@ -25,3 +25,4 @@ "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
     "ansi-red": "^0.1.1",
-    "extend-shallow": "^2.0.1"
+    "extend-shallow": "^2.0.1",
+    "js-yaml": "^3.4.3"
   },
@@ -31,23 +32,22 @@ "devDependencies": {
     "ansi-gray": "^0.1.1",
-    "benchmarked": "^0.1.3",
-    "coffee-script": "^1.8.0",
-    "delimiter-regex": "^1.1.0",
-    "for-own": "^0.1.2",
-    "front-matter": "^0.2.1",
-    "glob": "^4.2.1",
-    "gulp": "^3.8.10",
-    "gulp-istanbul": "^0.5.0",
-    "gulp-mocha": "^2.0.0",
-    "gulp-uglify": "^1.2.0",
-    "js-yaml": "^3.3.1",
-    "lodash": "^2.4.1",
-    "minimist": "^1.1.0",
-    "mocha": "^1.19.0",
-    "should": "^4.3.0",
-    "sort-object": "^0.3.2",
-    "toml": "^2.0.6"
+    "benchmarked": "^0.1.4",
+    "coffee-script": "^1.10.0",
+    "delimiter-regex": "^1.3.1",
+    "for-own": "^0.1.3",
+    "front-matter": "^2.0.0",
+    "glob": "^6.0.1",
+    "gulp": "^3.9.0",
+    "gulp-eslint": "^1.1.0",
+    "gulp-istanbul": "^0.10.2",
+    "gulp-mocha": "^2.2.0",
+    "lodash": "^3.10.1",
+    "minimist": "^1.2.0",
+    "mocha": "^2.3.3",
+    "should": "^7.1.1",
+    "sort-object": "^3.0.0",
+    "toml": "^2.3.0"
   },
   "keywords": [
+    "JSON",
     "assemble",
-    "JSON",
     "coffee",
@@ -74,5 +74,5 @@ "coffee-script",
     "parsing",
-    "template",
     "site",
     "static",
+    "template",
     "toml",
@@ -100,2 +100,2 @@ "yaml",
   }
-}
+}

README.md

@@ -5,3 +5,3 @@ # gray-matter [![NPM version](https://badge.fury.io/js/gray-matter.svg)](http://badge.fury.io/js/gray-matter)  [![Build Status](https://travis-ci.org/jonschlinkert/gray-matter.svg)](https://travis-ci.org/jonschlinkert/gray-matter)
 
-See the [benchmarks](#benchmarks). gray-matter is 15-30x faster than [front-matter]().
+See the [benchmarks](#benchmarks). gray-matter is 20-30x faster than [front-matter](https://github.com/jxson/front-matter).
 
@@ -11,3 +11,3 @@ ## Highlights
 * Reliable and battle-tested by [metalsmith](https://github.com/segmentio/metalsmith), [assemble](https://github.com/assemble/assemble), [verb](https://github.com/assemble/verb), and many other projects!
-* Will extract and parse:
+* Extracts and parses:
   - [YAML](http://github.com/nodeca/js-yaml)
@@ -306,5 +306,5 @@ - [JSON](http://en.wikipedia.org/wiki/Json)
 ## Related projects
-* [assemble](http://assemble.io): Static site generator for Grunt.js, Yeoman and Node.js. Used by Zurb Foundation, Zurb Ink, H5BP/Effeckt,… [more](http://assemble.io)
-* [metalsmith](https://github.com/segmentio/metalsmith#readme): An extremely simple, pluggable static site generator.
-* [verb](https://github.com/assemble/verb): Documentation generator for GitHub projects. Extremely powerful, easy to use, can generate anything from API… [more](https://github.com/assemble/verb)
+* [assemble](https://www.npmjs.com/package/assemble): Static site generator for Grunt.js, Yeoman and Node.js. Used by Zurb Foundation, Zurb Ink, H5BP/Effeckt,… [more](https://www.npmjs.com/package/assemble) | [homepage](http://assemble.io)
+* [metalsmith](https://www.npmjs.com/package/metalsmith): An extremely simple, pluggable static site generator. | [homepage](https://github.com/segmentio/metalsmith)
+* [verb](https://www.npmjs.com/package/verb): Documentation generator for GitHub projects. Verb is extremely powerful, easy to use, and is used… [more](https://www.npmjs.com/package/verb) | [homepage](https://github.com/verbose/verb)
 
@@ -346,3 +346,3 @@ ## Building the docs
 
-Pull requests and stars are always welcome. For bugs and feature requests, [please create an issue](https://github.com/jonschlinkert/gray-matter/issues/new)
+Pull requests and stars are always welcome. For bugs and feature requests, [please create an issue](https://github.com/jonschlinkert/gray-matter/issues/new).
 
@@ -356,2 +356,2 @@ ## License
 
-_This file was generated by [verb-cli](https://github.com/assemble/verb-cli) on July 16, 2015._
+_This file was generated by [verb-cli](https://github.com/assemble/verb-cli) on November 14, 2015._

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Minified code

Quality

This package contains minified code. This may be harmless in some cases where minified code is included in packaged libraries, however packages on npm should not minify code.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

18

decreased by-5.26%

Number of low quality alerts

0

decreased by-100%

Number of low supply chain risk alerts

2

decreased by-50%

Number of medium supply chain risk alerts

1

decreased by-50%

Worsened metrics

Total package byte prevSize

21728

decreased by-65.39%

Dependency count

3

increased by50%

Number of package files

5

decreased by-16.67%

Lines of code

354

decreased by-25.63%

Dependency changes

• + Addedjs-yaml@^3.4.3

• + Addedargparse@1.0.10(transitive)

• + Addedesprima@4.0.1(transitive)

• + Addedjs-yaml@3.14.1(transitive)

• + Addedsprintf-js@1.0.3(transitive)