lodash.some - npm Package Compare versions

Comparing version 4.0.1 to 4.0.2

index.js

 /**
- * lodash 4.0.1 (Custom Build) <https://lodash.com/>
+ * lodash 4.0.2 (Custom Build) <https://lodash.com/>
  * Build: `lodash modularize exports="npm" -o ./`
@@ -40,3 +40,35 @@ * Copyright 2012-2016 The Dojo Foundation <http://dojofoundation.org/>
 
+/** Used to determine if values are of the language type `Object`. */
+var objectTypes = {
+  'function': true,
+  'object': true
+};
+
+/** Detect free variable `exports`. */
+var freeExports = (objectTypes[typeof exports] && exports && !exports.nodeType) ? exports : null;
+
+/** Detect free variable `module`. */
+var freeModule = (objectTypes[typeof module] && module && !module.nodeType) ? module : null;
+
+/** Detect free variable `global` from Node.js. */
+var freeGlobal = checkGlobal(freeExports && freeModule && typeof global == 'object' && global);
+
+/** Detect free variable `self`. */
+var freeSelf = checkGlobal(objectTypes[typeof self] && self);
+
+/** Detect free variable `window`. */
+var freeWindow = checkGlobal(objectTypes[typeof window] && window);
+
+/** Detect `this` as the global object. */
+var thisGlobal = checkGlobal(objectTypes[typeof this] && this);
+
 /**
+ * Used as a reference to the global object.
+ *
+ * The `this` value is used if it's the global object to avoid Greasemonkey's
+ * restricted `window` object, otherwise the `window` object is used.
+ */
+var root = freeGlobal || ((freeWindow !== (thisGlobal && thisGlobal.window)) && freeWindow) || freeSelf || thisGlobal || Function('return this')();
+
+/**
  * A specialized version of `_.some` for arrays without support for iteratee
@@ -63,2 +95,13 @@ * shorthands.
 /**
+ * Checks if `value` is a global object.
+ *
+ * @private
+ * @param {*} value The value to check.
+ * @returns {null|Object} Returns `value` if it's a global object, else `null`.
+ */
+function checkGlobal(value) {
+  return (value && value.Object === Object) ? value : null;
+}
+
+/**
  * Checks if `value` is a valid array-like index.
@@ -78,3 +121,3 @@ *
 /** Used for built-in method references. */
-var objectProto = global.Object.prototype;
+var objectProto = Object.prototype;
 
@@ -88,3 +131,3 @@ /**
 /** Built-in value references. */
-var Symbol = global.Symbol;
+var Symbol = root.Symbol;
 
@@ -354,11 +397,11 @@ /** Used to convert symbols to primitives and strings. */
  *
- * // using the `_.matches` iteratee shorthand
+ * // The `_.matches` iteratee shorthand.
  * _.some(users, { 'user': 'barney', 'active': false });
  * // => false
  *
- * // using the `_.matchesProperty` iteratee shorthand
+ * // The `_.matchesProperty` iteratee shorthand.
  * _.some(users, ['active', false]);
  * // => true
  *
- * // using the `_.property` iteratee shorthand
+ * // The `_.property` iteratee shorthand.
  * _.some(users, 'active');
@@ -540,4 +583,2 @@ * // => true
 function isObject(value) {
-  // Avoid a V8 JIT bug in Chrome 19-20.
-  // See https://code.google.com/p/v8/issues/detail?id=2291 for more details.
   var type = typeof value;
@@ -544,0 +585,0 @@ return !!value && (type == 'object' || type == 'function');

package.json

 {
   "name": "lodash.some",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "description": "The lodash method `_.some` exported as a module.",
@@ -8,3 +8,3 @@ "homepage": "https://lodash.com/",
   "license": "MIT",
-  "keywords": "lodash, lodash-modularized, stdlib, util, some",
+  "keywords": "lodash-modularized, some",
   "author": "John-David Dalton <[e-mail]> (http://allyoucanleet.com/)",
@@ -11,0 +11,0 @@ "contributors": [

README.md

@@ -1,2 +0,2 @@
-# lodash.some v4.0.1
+# lodash.some v4.0.2
 
@@ -18,2 +18,2 @@ The [lodash](https://lodash.com/) method `_.some` exported as a [Node.js](https://nodejs.org/) module.
 
-See the [documentation](https://lodash.com/docs#some) or [package source](https://github.com/lodash/lodash/blob/4.0.1-npm-packages/lodash.some) for more details.
+See the [documentation](https://lodash.com/docs#some) or [package source](https://github.com/lodash/lodash/blob/4.0.2-npm-packages/lodash.some) for more details.

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

21745

increased by6.5%

Lines of code

655

increased by5.14%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes