pouchdb-quick-search - npm Package Compare versions

Comparing version 1.2.0 to 1.2.1

bin/dev-server.js

@@ -0,0 +0,0 @@ #!/usr/bin/env node

bin/test-browser.js

@@ -0,0 +0,0 @@ #!/usr/bin/env node

bower.json

@@ -0,0 +0,0 @@ {

lib/index.js

@@ -14,2 +14,3 @@ 'use strict';
 var Promise = utils.Promise;
+var stringify = require('json-stable-stringify');
 
@@ -152,3 +153,3 @@ var indexes = {};
 
-  var persistedIndexName = 'search-' + utils.MD5(JSON.stringify(indexParams));
+  var persistedIndexName = 'search-' + utils.MD5(stringify(indexParams));
 
@@ -155,0 +156,0 @@ var mapFun = createMapFunction(fieldBoosts, index, filter, pouch);

lib/pouch-utils.js

@@ -0,0 +0,0 @@ 'use strict';

package.json

 {
   "name": "pouchdb-quick-search",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "PouchDB Quick Search - persisted full-text search for PouchDB",
@@ -38,2 +38,3 @@ "main": "lib/index.js",
     "inherits": "~2.0.1",
+    "json-stable-stringify": "^1.0.1",
     "lie": "^2.6.0",
@@ -40,0 +41,0 @@ "lunr": "0.7.1",

README.md

@@ -0,0 +0,0 @@ PouchDB Quick Search

test/bind-polyfill.js

@@ -0,0 +0,0 @@ (function () {

test/deps/lunr.fr.js

@@ -0,0 +0,0 @@ /*!

test/deps/lunr.multi.js

@@ -0,0 +0,0 @@ /**

test/deps/lunr.stemmer.support.js

@@ -0,0 +0,0 @@ /*!

test/docs/test-docs-2.js

@@ -0,0 +0,0 @@ 'use strict';

test/docs/test-docs-3.js

@@ -0,0 +0,0 @@ 'use strict';

test/docs/test-docs-4.js

@@ -0,0 +0,0 @@ 'use strict';

test/docs/test-docs-5.js

@@ -0,0 +0,0 @@ 'use strict';

test/docs/test-docs-6.js

@@ -0,0 +0,0 @@ 'use strict';

test/docs/test-docs-7.js

@@ -0,0 +0,0 @@ 'use strict';

test/docs/test-docs-8.js

@@ -0,0 +0,0 @@ 'use strict';

test/docs/test-docs.js

@@ -0,0 +0,0 @@ 'use strict';

test/test.js

@@ -0,0 +0,0 @@ /*jshint expr:true */

test/webrunner.js

@@ -0,0 +0,0 @@ /* global mocha: true */

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2286734

increased by56.75%

Number of package files

45

increased by45.16%

Lines of code

52243

increased by84.72%

Worsened metrics

Dependency count

11

increased by10%

Number of low supply chain risk alerts

39

increased by25.81%

Number of medium supply chain risk alerts

14

increased by180%

Dependency changes

• + Addedjson-stable-stringify@^1.0.1

• + Addedcall-bind@1.0.8(transitive)

• + Addedcall-bind-apply-helpers@1.0.1(transitive)

• + Addedcall-bound@1.0.3(transitive)

• + Addeddefine-data-property@1.1.4(transitive)

• + Addeddunder-proto@1.0.1(transitive)

• + Addedes-define-property@1.0.1(transitive)

• + Addedes-errors@1.3.0(transitive)

• + Addedes-object-atoms@1.1.1(transitive)

• + Addedfunction-bind@1.1.2(transitive)

• + Addedget-intrinsic@1.2.7(transitive)

• + Addedget-proto@1.0.1(transitive)

• + Addedgopd@1.2.0(transitive)

• + Addedhas-property-descriptors@1.0.2(transitive)

• + Addedhas-symbols@1.1.0(transitive)

• + Addedhasown@2.0.2(transitive)

• + Addedisarray@2.0.5(transitive)

• + Addedjson-stable-stringify@1.2.1(transitive)

• + Addedjsonify@0.0.1(transitive)

• + Addedmath-intrinsics@1.1.0(transitive)

• + Addedset-function-length@1.2.2(transitive)