nude-element - npm Package Compare versions

Comparing version 0.0.7 to 0.0.8

package.json

 {
   "name": "nude-element",
-  "version": "0.0.7",
+  "version": "0.0.8",
   "description": "Composable web component helpers",
@@ -5,0 +5,0 @@ "main": "index.js",

src/props/types/basic.js

@@ -0,1 +1,3 @@
+import { resolve } from "../types.js";
+
 const callableBuiltins = new Set([String, Number, Boolean, Array, Object, Function, Symbol, BigInt]);
@@ -18,3 +20,3 @@
 	parse (value, type) {
-		let Type = type.is;
+		let {is: Type, ...typeOptions} = resolve(type);
 		if (!Type || value instanceof Type) {
@@ -21,0 +23,0 @@ return value;

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

63643

increased by0.11%

Lines of code

1502

increased by0.07%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes