lodash-contrib - npm Package Compare versions

Comparing version 241.4.5 to 241.4.6

_.util.strings.js

@@ -18,3 +18,2 @@ // lodash-contrib (lodash.util.strings.js 0.0.1)
   var plusRegex = /\+/g;
-  var spaceRegex = /\%20/g;
   var bracketRegex = /(?:([^\[]+))|(?:\[(.*?)\])/g;
@@ -25,5 +24,2 @@
   };
-  var urlEncode = function(s) {
-    return encodeURIComponent(s).replace(spaceRegex, '+');
-  };
 
@@ -41,3 +37,3 @@ var buildParams = function(prefix, val, top) {
     } else {
-      return urlEncode(prefix) + '=' + urlEncode(val);
+      return encodeURIComponent(prefix) + '=' + encodeURIComponent(val);
     }
@@ -44,0 +40,0 @@ };

dist/lodash-contrib.js

@@ -0,0 +0,0 @@ // lodash-contrib v241.2.0

index.js

@@ -1,16 +0,13 @@
-require('./_.array.builders');
-require('./_.array.selectors');
-require('./_.collections.walk');
-require('./_.function.arity');
-require('./_.function.combinators');
-require('./_.function.dispatch');
-require('./_.function.iterators');
-require('./_.function.predicates');
-require('./_.object.builders');
-require('./_.object.selectors');
-require('./_.util.existential');
-require('./_.util.operators');
-require('./_.util.strings');
-require('./_.util.trampolines');
+var fs = require('fs');
+var vm = require('vm');
+var _ = require('lodash').runInContext();
 
-module.exports = require('lodash');
+var isAddOnRegEx = _.bindAll(/^_\..+/, 'test');
+var context = vm.createContext({_:_});
+var rightCurryVm = _.partialRight(vm.runInNewContext, context);
+function simpleReadFile(filename) { return fs.readFileSync(filename); }
+_(fs.readdirSync(__dirname)).filter(isAddOnRegEx.test).map(simpleReadFile).each(function (code) {
+  rightCurryVm(code);
+});
+
+module.exports = _;

package.json

 {
   "name": "lodash-contrib",
   "description": "The brass buckles on lodash's utility belt",
-  "version": "241.4.5",
+  "version": "241.4.6",
   "main": "index.js",
@@ -6,0 +6,0 @@ "dependencies": {

test/mocha/util.strings.js

@@ -1,3 +0,2 @@
-var _ = require('lodash');
-require('../../_.util.strings');
+var _ = require('../..');
 var assert = require('assert');
@@ -4,0 +3,0 @@

New alerts

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

1516934

decreased by-0.02%

Lines of code

28991

decreased by-0.03%

Number of low supply chain risk alerts

3

increased by200%

No dependency changes