pofile - npm Package Compare versions

Comparing version 0.2.7 to 0.2.8

lib/po.js

@@ -77,3 +77,14 @@ var fs = require('fs'),
 
-    headers.split(/\n/).forEach(function (header) {
+    headers.split(/\n/).reduce(function (acc, line) {
+        if (acc.merge) {
+            //join lines, remove last resp. first "
+            line = acc.pop().slice(0, -1) + line.slice(1);
+            delete acc.merge;
+        }
+        if (/^".*"$/.test(line) && !/^".*\\n"$/.test(line)) {
+            acc.merge = true;
+        }
+        acc.push(line);
+        return acc;
+    }, []).forEach(function (header) {
         if (header.match(/^#/)) {
@@ -80,0 +91,0 @@ po.comments.push(header.replace(/^#\s*/, ''));

package.json

 {
   "name": "pofile",
   "description": "Parse and serialize Gettext PO files.",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "author": {
@@ -6,0 +6,0 @@ "name": "Ruben Vermeersch",

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

14490

2.57%

Lines of code

238

4.85%

Worsened metrics

Number of low supply chain risk alerts

3

200%

No dependency changes