javascript-stringify - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

javascript-stringify.js

@@ -112,2 +112,6 @@ (function (root, stringify) {
     '[object Object]': function (object, indent, stringify) {
+      if (typeof Buffer === 'function' && Buffer.isBuffer(object)) {
+        return 'new Buffer(' + stringify(object.toString()) + ')';
+      }
+
       // Iterate over object keys and concat string together.
@@ -114,0 +118,0 @@ var values = Object.keys(object).reduce(function (values, key) {

package.json

 {
   "name": "javascript-stringify",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Stringify is to `eval` as `JSON.stringify` is to `JSON.parse`",
@@ -5,0 +5,0 @@ "main": "javascript-stringify.js",

test.js

@@ -30,2 +30,7 @@ var expect    = require('chai').expect;
       );
+
+      it(
+        'should escape certain unicode sequences',
+        test('\u0602', "'\\u0602'")
+      );
     });
@@ -78,2 +83,6 @@
       });
+
+      describe('Buffer', function () {
+        it('should stringify', test(new Buffer('test'), "new Buffer('test')"));
+      });
     });
@@ -80,0 +89,0 @@

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Improved metrics

Total package byte prevSize

17308

2.26%

Lines of code

381

2.7%

No dependency changes