mcoreapp - npm Package Compare versions

Comparing version 2.0.54 to 2.0.55

dist/mcore.js

@@ -458,10 +458,4 @@ (function webpackUniversalModuleDefinition(root, factory) {
 	    }
-	    if (this.scope && this.scope.hasOwnProperty(key)) {
-	      if (isPlainObject(this.scope[key])) {
-	        return extend(true, {}, this.scope[key]);
-	      } else if (isArray(this.scope[key])) {
-	        return extend(true, [], this.scope[key]);
-	      } else {
-	        return this.scope[key];
-	      }
+	    if (this.scope.hasOwnProperty(key)) {
+	      return this.scope[key];
 	    }
@@ -1528,3 +1522,3 @@ return defaultVal;
 	  each(moves, function(move) {
-	    var el, index, insertNode;
+	    var el, error, error1, index, insertNode;
 	    index = move.index;
@@ -1545,3 +1539,8 @@ if (move.type === 0) {
 	      staticNodeList.splice(index, 0, insertNode);
-	      node.insertBefore(insertNode, node.childNodes[index] || null);
+	      try {
+	        node.insertBefore(insertNode, node.childNodes[index] || null);
+	      } catch (error1) {
+	        error = error1;
+	        console.log(node);
+	      }
 	    }
@@ -1548,0 +1547,0 @@ });

package.json

 {
   "name": "mcoreapp",
-  "version": "2.0.54",
+  "version": "2.0.55",
   "description": "simple MVVM",
@@ -5,0 +5,0 @@ "main": "dist/mcoreApp.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

25

decreased by-3.85%

Worsened metrics

Total package byte prevSize

2518000

decreased by-0.65%

Lines of code

48279

decreased by-0.96%

No dependency changes