jse - npm Package Compare versions

Comparing version 0.0.1 to 0.0.3

package.json

 {
   "name": "jse",
   "description": "Evaluate JavaScript with pipe.",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "author": "You Kinjoh <[e-mail]>",
@@ -6,0 +6,0 @@ "license": "MIT",

README.md

@@ -15,2 +15,3 @@ # jse: JavaScript Evaluator
 $ jse [one liner]
+$ jse -p [one liner]
 $ jse -m [one liner for array]
@@ -22,5 +23,8 @@ ```
 ```
+$ #like "ls | cut -f1 -d."
+$ ls | jse -p "__LINE__.split('.')[0]"
+$ ls | jse -mp "__LINES__.map(function(line) {return line.split('.')[0];}).join('\n')"
 $ #like "grep error log.log"
-$ less log.log | $0 "if (/error/.test(__LINE__)) {console.log(__LINE__);}"',
-$ less log.log | $0 -m "__LINES__.filter(function(line) {return /error/.test(line);}).forEach(function(line) {console.log(line);});"'
+$ less log.log | jse "if (/error/.test(__LINE__)) {console.log(__LINE__);}"
+$ less log.log | jse -m "__LINES__.filter(function(line) {return /error/.test(line);}).forEach(function(line) {console.log(line);});"
 ```
@@ -31,4 +35,5 @@
 ```
+-p, --print      Print result.
 -m, --multiline  Use array of multiline.
--h, --help       Display help.          
+-h, --help       Display help.
 ```

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Empty package

Supply chain risk

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

9650

increased by38.81%

Number of package files

14

increased by75%

Lines of code

57

increased byInfinity%

Number of lines in readme file

37

increased by15.63%

Worsened metrics

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes