lodash.mergewith - npm Package Compare versions

Comparing version 4.0.4 to 4.1.0

index.js

 /**
- * lodash 4.0.4 (Custom Build) <https://lodash.com/>
+ * lodash 4.1.0 (Custom Build) <https://lodash.com/>
  * Build: `lodash modularize exports="npm" -o ./`
@@ -15,3 +15,4 @@ * Copyright 2012-2016 The Dojo Foundation <http://dojofoundation.org/>
     keysIn = require('lodash.keysin'),
-    rest = require('lodash.rest');
+    rest = require('lodash.rest'),
+    root = require('lodash._root');
 
@@ -92,35 +93,3 @@ /** Used as references for various `Number` constants. */
 
-/** Used to determine if values are of the language type `Object`. */
-var objectTypes = {
-  'function': true,
-  'object': true
-};
-
-/** Detect free variable `exports`. */
-var freeExports = (objectTypes[typeof exports] && exports && !exports.nodeType) ? exports : null;
-
-/** Detect free variable `module`. */
-var freeModule = (objectTypes[typeof module] && module && !module.nodeType) ? module : null;
-
-/** Detect free variable `global` from Node.js. */
-var freeGlobal = checkGlobal(freeExports && freeModule && typeof global == 'object' && global);
-
-/** Detect free variable `self`. */
-var freeSelf = checkGlobal(objectTypes[typeof self] && self);
-
-/** Detect free variable `window`. */
-var freeWindow = checkGlobal(objectTypes[typeof window] && window);
-
-/** Detect `this` as the global object. */
-var thisGlobal = checkGlobal(objectTypes[typeof this] && this);
-
 /**
- * Used as a reference to the global object.
- *
- * The `this` value is used if it's the global object to avoid Greasemonkey's
- * restricted `window` object, otherwise the `window` object is used.
- */
-var root = freeGlobal || ((freeWindow !== (thisGlobal && thisGlobal.window)) && freeWindow) || freeSelf || thisGlobal || Function('return this')();
-
-/**
  * Adds the key-value `pair` to `map`.
@@ -176,13 +145,2 @@ *
 /**
- * Checks if `value` is a global object.
- *
- * @private
- * @param {*} value The value to check.
- * @returns {null|Object} Returns `value` if it's a global object, else `null`.
- */
-function checkGlobal(value) {
-  return (value && value.Object === Object) ? value : null;
-}
-
-/**
  * Checks if `value` is a host object in IE < 9.
@@ -189,0 +147,0 @@ *

package.json

 {
   "name": "lodash.mergewith",
-  "version": "4.0.4",
+  "version": "4.1.0",
   "description": "The lodash method `_.mergeWith` exported as a module.",
@@ -20,2 +20,3 @@ "homepage": "https://lodash.com/",
     "lodash._basefor": "^3.0.0",
+    "lodash._root": "^3.0.0",
     "lodash._stack": "^4.0.0",
@@ -22,0 +23,0 @@ "lodash.isplainobject": "^4.0.0",

README.md

@@ -1,2 +0,2 @@
-# lodash.mergewith v4.0.4
+# lodash.mergewith v4.1.0
 
@@ -18,2 +18,2 @@ The [lodash](https://lodash.com/) method `_.mergeWith` exported as a [Node.js](https://nodejs.org/) module.
 
-See the [documentation](https://lodash.com/docs#mergeWith) or [package source](https://github.com/lodash/lodash/blob/4.0.4-npm-packages/lodash.mergewith) for more details.
+See the [documentation](https://lodash.com/docs#mergeWith) or [package source](https://github.com/lodash/lodash/blob/4.1.0-npm-packages/lodash.mergewith) for more details.

Fixed alerts

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

36851

decreased by-3.73%

Dependency count

8

increased by14.29%

Lines of code

1130

decreased by-2.84%

Dependency changes

• + Addedlodash._root@^3.0.0

• + Addedlodash._root@3.0.1(transitive)