node-red-node-feedparser - npm Package Compare versions

Comparing version 0.1.2 to 0.1.3

32-feedparse.js

@@ -21,2 +21,3 @@ /**
     var request = require("request");
+    var url = require('url');
 
@@ -30,3 +31,6 @@ function FeedParseNode(n) {
         this.seen = {};
-        if (this.url !== "") {
+        var parsedUrl = url.parse(this.url);
+        if (!(parsedUrl.host || (parsedUrl.hostname && parsedUrl.port)) && !parsedUrl.isUnix) {
+            this.error(RED._("feedparse.errors.invalidurl"));
+        } else {
             var getFeed = function() {
@@ -69,4 +73,2 @@ var req = request(node.url, {timeout: 10000, pool: false});
             getFeed();
-        } else {
-            this.error(RED._("feedparse.errors.invalidurl"));
         }
@@ -73,0 +75,0 @@

package.json

 {
   "name": "node-red-node-feedparser",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "A Node-RED node to get RSS Atom feeds.",
   "dependencies": {
     "feedparser": "1.1.3",
-    "request": "2.61.0"
+    "request": "2.65.0"
   },
@@ -9,0 +9,0 @@ "repository": {

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

17293

increased by0.82%

Lines of code

83

increased by2.47%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedaws-sign2@0.6.0(transitive)

• + Addedhar-validator@2.0.6(transitive)

• + Addedpinkie@2.0.4(transitive)

• + Addedpinkie-promise@2.0.1(transitive)

• + Addedqs@5.2.1(transitive)

• + Addedrequest@2.65.0(transitive)

• + Addedtough-cookie@2.2.2(transitive)

• - Removedaws-sign2@0.5.0(transitive)

• - Removedbluebird@2.11.0(transitive)

• - Removedhar-validator@1.8.0(transitive)

• - Removedpsl@1.9.0(transitive)

• - Removedpunycode@2.3.1(transitive)

• - Removedqs@4.0.0(transitive)

• - Removedquerystringify@2.2.0(transitive)

• - Removedrequest@2.61.0(transitive)

• - Removedrequires-port@1.0.0(transitive)

• - Removedtough-cookie@4.1.4(transitive)

• - Removeduniversalify@0.2.0(transitive)

• - Removedurl-parse@1.5.10(transitive)

• Updatedrequest@2.65.0