lodash.mergewith - npm Package Compare versions

Comparing version 4.3.1 to 4.3.2

index.js

 /**
- * lodash 4.3.1 (Custom Build) <https://lodash.com/>
+ * lodash 4.3.2 (Custom Build) <https://lodash.com/>
  * Build: `lodash modularize exports="npm" -o ./`
@@ -114,3 +114,4 @@ * Copyright 2012-2016 The Dojo Foundation <http://dojofoundation.org/>
 /**
- * This function is like `assignValue` except that it doesn't assign `undefined` values.
+ * This function is like `assignValue` except that it doesn't assign
+ * `undefined` values.
  *
@@ -227,3 +228,3 @@ * @private
         isCommon = false;
-        newValue = baseClone(srcValue, true);
+        newValue = baseClone(srcValue, !customizer);
       }
@@ -237,3 +238,3 @@ }
         isCommon = false;
-        newValue = baseClone(srcValue, true);
+        newValue = baseClone(srcValue, !customizer);
       }
@@ -254,2 +255,3 @@ else {
   }
+  stack['delete'](srcValue);
   assignMergeValue(object, key, newValue);
@@ -505,4 +507,3 @@ }
 function isArrayLike(value) {
-  return value != null &&
-    !(typeof value == 'function' && isFunction(value)) && isLength(getLength(value));
+  return value != null && isLength(getLength(value)) && !isFunction(value);
 }
@@ -555,4 +556,4 @@
   // The use of `Object#toString` avoids issues with the `typeof` operator
-  // in Safari 8 which returns 'object' for typed array constructors, and
-  // PhantomJS 1.9 which returns 'function' for `NodeList` instances.
+  // in Safari 8 which returns 'object' for typed array and weak map constructors,
+  // and PhantomJS 1.9 which returns 'function' for `NodeList` instances.
   var tag = isObject(value) ? objectToString.call(value) : '';
@@ -559,0 +560,0 @@ return tag == funcTag || tag == genTag;

package.json

 {
   "name": "lodash.mergewith",
-  "version": "4.3.1",
+  "version": "4.3.2",
   "description": "The lodash method `_.mergeWith` exported as a module.",
@@ -12,3 +12,3 @@ "homepage": "https://lodash.com/",
     "John-David Dalton <[e-mail]> (http://allyoucanleet.com/)",
-    "Blaine Bublitz <[e-mail]> (https://github.com/phated)",
+    "Blaine Bublitz <[e-mail]> (https://github.com/phated)",
     "Mathias Bynens <[e-mail]> (https://mathiasbynens.be/)"
@@ -15,0 +15,0 @@ ],

README.md

@@ -1,2 +0,2 @@
-# lodash.mergewith v4.3.1
+# lodash.mergewith v4.3.2
 
@@ -18,2 +18,2 @@ The [lodash](https://lodash.com/) method `_.mergeWith` exported as a [Node.js](https://nodejs.org/) module.
 
-See the [documentation](https://lodash.com/docs#mergeWith) or [package source](https://github.com/lodash/lodash/blob/4.3.1-npm-packages/lodash.mergewith) for more details.
+See the [documentation](https://lodash.com/docs#mergeWith) or [package source](https://github.com/lodash/lodash/blob/4.3.2-npm-packages/lodash.mergewith) for more details.

New alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

22900

0.13%

Lines of code

681

0.15%

Worsened metrics

Number of low supply chain risk alerts

7

16.67%

No dependency changes