literate-jasmine - npm Package Compare versions

Comparing version 0.0.17 to 0.0.18

package.json

 {
     "name": "literate-jasmine",
     "description": "write tests in markdown that are parsed and then run using jasmine",
-    "version": "0.0.17",
+    "version": "0.0.18",
     "bin": {
@@ -6,0 +6,0 @@ "literate-jasmine": "./bin/literate-jasmine"

README.md

@@ -63,3 +63,3 @@ # literate-jasmine [![Build Status](https://travis-ci.org/cymen/literate-jasmine.png?branch=master)](https://travis-ci.org/cymen/literate-jasmine)
 
-![screen shot of running literate-jasmine on this README.md](run.png)
+![screen shot of running literate-jasmine on this README.md](console.png)
 
@@ -66,0 +66,0 @@ (If you're working on this project, run `./bin/literate-jasmine` instead.)

src/parser.js

@@ -23,5 +23,3 @@ require('jasmine-node');
     complete.global = parser.parseCodeBlocks(tree, 1);
-    complete.globalFn = function(then) {
-      eval(complete.global);
-    };
+    complete.globalFn = new Function(complete.global);
 
@@ -56,5 +54,3 @@ for (var i=2; i < tree.length; i++) {
     parsedDescribe.beforeEach = parser.parseCodeBlocks(tree, offset);
-    parsedDescribe.beforeEachFn = function() {
-      eval(parsedDescribe.beforeEach);
-    };
+    parsedDescribe.beforeEachFn = new Function(parsedDescribe.beforeEach);
 
@@ -93,5 +89,3 @@ while (true) {
 
-    it.fn = function() {
-      eval(it.code);
-    };
+    it.fn = new Function(it.code);
 
@@ -98,0 +92,0 @@ return it;

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

90981

decreased by-0.06%

Lines of code

273

decreased by-2.15%

No dependency changes