jest - npm Package Compare versions

Comparing version 0.0.89 to 0.0.90

api.js

@@ -145,3 +145,3 @@ var _ = require('underscore'),
             return field.usages;
-        }).flatten().union([schema.url,schema.sorting]).value();
+        }).flatten().push(schema.url).push(schema.sorting).value();
     },
@@ -148,0 +148,0 @@ put_usage : function(schema)

package.json

 {
 	"name":"jest",
 	"description":"JavaScriptational State Transfer. JS restful API layer with Mongoose based resources. Inspired by python Tastypie",
-	"version":"0.0.89",
+	"version":"0.0.90",
 	"author":"Ishai Jaffe <[e-mail]>",
@@ -6,0 +6,0 @@ "contributors": [

resource.js

@@ -78,3 +78,6 @@ var _ = require('underscore'),
             if(typeof(filters) == 'string' || typeof(sorts) == 'string')
+            {
                 callback({code:400,message:filters});
+                return;
+            }
             var offset = Number(req.query['offset'] || 0);
@@ -337,3 +340,3 @@ var limit = Number(req.query['limit'] || self.default_limit || self.settings.DEFAULT_LIMIT);
     get_update_tree:function (req) {
-        var fields = req.jest_update_fields || this.udate_fields;
+        var fields = req.jest_update_fields || this.update_fields;
         return this.make_field_tree(fields);
@@ -728,3 +731,3 @@ },
         {
-            if(field in tree || !tree_empty)
+            if(!tree_empty || field in tree)
             {
@@ -731,0 +734,0 @@ if(!exclude_tree_empty || !(field in exclude_tree))

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 2 instances in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 9 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

SPDX disjunction

License

SPDX disjunction for an artifact's license information

Found 1 instance in 1 package

Mixed license

License

(Experimental) Package contains multiple licenses.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license

Found 1 instance in 1 package

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

SPDX disjunction

License

SPDX disjunction for an artifact's license information

Found 1 instance in 1 package

No License Found

License

(Experimental) License information could not be found

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4453205

increased by8008.53%

Number of package files

306

increased by1700%

Lines of code

35060

increased by2283.41%

Worsened metrics

Number of low license alerts

3

increased by50%

License quality

80

decreased by-20%

Number of high supply chain risk alerts

2

increased byInfinity%

Number of low supply chain risk alerts

249

increased by24800%

Number of medium supply chain risk alerts

24

increased by2300%

No dependency changes