grunt-jsdoc - npm Package Compare versions

Comparing version 2.2.0 to 2.2.1

package.json

 {
   "name": "grunt-jsdoc",
   "description": "Integrates jsdoc3 generation into your Grunt build",
-  "version": "2.2.0",
+  "version": "2.2.1",
   "homepage": "https://github.com/krampstudio/grunt-jsdoc",
@@ -44,3 +44,4 @@ "author": {
     "cross-spawn": "^3.0.1",
-    "jsdoc": "~3.5.5"
+    "jsdoc": "~3.5.5",
+    "marked": "^0.3.9"
   },
@@ -47,0 +48,0 @@ "keywords": [

README.md

@@ -124,2 +124,3 @@ # grunt-jsdoc [![Build Status](https://travis-ci.org/krampstudio/grunt-jsdoc.png)](https://travis-ci.org/krampstudio/grunt-jsdoc) [![NPM version](https://badge.fury.io/js/grunt-jsdoc.png)](http://badge.fury.io/js/grunt-jsdoc) [![Built with Grunt](https://cdn.gruntjs.com/builtwith.png)](http://gruntjs.com/)
  * _2.2.0_ jsdoc 3.5.0
+    * _2.2.1_ fix version of transitive dependency `marked` to prevent xss
  * _2.1.0_ use `cross-spawn` instead of `cross-spawn-async`, add `generating` and `generated` grunt events
@@ -126,0 +127,0 @@ * _2.0.0_ `private` behavior, `cross-spawn-async` instead of manual windows management

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

26409

increased by28.41%

Number of package files

16

increased by100%

Lines of code

443

increased by77.2%

Number of lines in readme file

171

increased by0.59%

Worsened metrics

Dependency count

3

increased by50%

Number of low supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedmarked@^0.3.9