manis - npm Package Compare versions

Comparing version 0.3.4 to 0.3.5

lib/util.js

@@ -132,2 +132,6 @@ /**
 exports.loader = function (content, path, options) {
+    if (/\.js$/.test(path)) {
+        return require(path);
+    }
+
     try {
@@ -134,0 +138,0 @@ return yaml.safeLoad(stripJSONComment(content), options || {filename: path, json: true});

package.json

 {
   "name": "manis",
-  "version": "0.3.4",
+  "version": "0.3.5",
   "description": "Find and read your configuration files recursively",
@@ -5,0 +5,0 @@ "main": "lib/manis.js",

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

22665

increased by0.3%

Lines of code

527

increased by0.57%

Worsened metrics

Number of low supply chain risk alerts

3

increased by50%

No dependency changes