js-data - npm Package Compare versions

Comparing version 3.0.9 to 3.0.10

package.json

 {
   "name": "js-data",
   "description": "Robust, framework-agnostic in-memory data store.",
-  "version": "3.0.9",
+  "version": "3.0.10",
   "homepage": "http://www.js-data.io",
@@ -71,21 +71,21 @@ "repository": {
   "devDependencies": {
-    "@babel/cli": "^7.8.3",
-    "@babel/core": "^7.8.3",
+    "@babel/cli": "^7.13.10",
+    "@babel/core": "^7.13.10",
     "@babel/node": "^7.8.3",
     "@babel/plugin-external-helpers": "^7.8.3",
-    "@babel/plugin-transform-modules-umd": "^7.8.3",
-    "@babel/plugin-transform-regenerator": "^7.8.3",
+    "@babel/plugin-transform-modules-umd": "^7.13.0",
+    "@babel/plugin-transform-regenerator": "^7.12.13",
     "@babel/polyfill": "^7.8.3",
-    "@babel/preset-env": "^7.8.3",
+    "@babel/preset-env": "^7.13.12",
     "@js-data/repo-tools": "^1.0.1",
     "babel-eslint": "^10.0.3",
-    "chai": "^4.2.0",
+    "chai": "^4.3.4",
     "docdash": "^1.1.1",
     "eslint": "^6.8.0",
-    "eslint-config-standard": "^14.1.0",
-    "eslint-plugin-import": "^2.20.0",
-    "eslint-plugin-node": "^11.0.0",
-    "eslint-plugin-promise": "^4.2.1",
-    "eslint-plugin-standard": "^4.0.1",
-    "husky": "^4.2.1",
+    "eslint-config-standard": "^14.1.1",
+    "eslint-plugin-import": "^2.22.1",
+    "eslint-plugin-node": "^11.1.0",
+    "eslint-plugin-promise": "^4.3.1",
+    "eslint-plugin-standard": "^4.1.0",
+    "husky": "^4.3.8",
     "jsdoc": "^3.6.3",
@@ -100,14 +100,14 @@ "karma": "^4.4.1",
     "karma-sinon": "^1.0.5",
-    "lint-staged": "^10.0.2",
-    "lodash": "^4.17.15",
-    "mocha": "^7.0.0",
+    "lint-staged": "^10.5.4",
+    "lodash": "^4.17.21",
+    "mocha": "^7.2.0",
     "nyc": "15.0.0",
     "phantomjs-prebuilt": "^2.1.16",
-    "prettier-standard": "^16.1.0",
-    "rollup": "^1.29.0",
-    "rollup-plugin-babel": "^4.3.3",
+    "prettier-standard": "^16.4.1",
+    "rollup": "^1.32.1",
+    "rollup-plugin-babel": "^4.4.0",
     "sinon": "^8.1.0",
     "standard": "14.3.1",
-    "uglify-js": "^3.7.6"
+    "uglify-js": "^3.13.2"
   }
 }

src/utils.js

@@ -73,2 +73,6 @@ /**
 
+const isPrototypePolluted = function (key) {
+  return ['__proto__', 'prototype', 'constructor'].includes(key)
+}
+
 const utils = {
@@ -450,2 +454,3 @@ /**
       for (var key in source) {
+        if (isPrototypePolluted(key)) continue
         const value = source[key]
@@ -452,0 +457,0 @@ const existing = dest[key]

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3090996

increased by5.05%

Lines of code

41204

increased by0.08%

No dependency changes