prop-types - npm Package Compare versions

Comparing version 15.7.1 to 15.7.2

CHANGELOG.md

@@ -0,1 +1,5 @@
+## 15.7.2
+* [Fix] ensure nullish values in `oneOf` do not crash ([#256](https://github.com/facebook/prop-types/issues/256))
+* [Fix] move `loose-envify` back to production deps, for browerify usage ([#203](https://github.com/facebook/prop-types/issues/203))
+
 ## 15.7.1
@@ -2,0 +6,0 @@ * [Fix] avoid template literal syntax ([#255](https://github.com/facebook/prop-types/issues/255), [#254](https://github.com/facebook/prop-types/issues/254))

factoryWithTypeCheckers.js

@@ -329,3 +329,4 @@ /**
       var valuesString = JSON.stringify(expectedValues, function replacer(key, value) {
-        if (getPropType(value) === 'symbol') {
+        var type = getPreciseType(value);
+        if (type === 'symbol') {
           return String(value);
@@ -508,2 +509,7 @@ }
 
+    // falsy value can't be a Symbol
+    if (!propValue) {
+      return false;
+    }
+
     // 19.4.3.5 Symbol.prototype[@@toStringTag] === 'Symbol'
@@ -510,0 +516,0 @@ if (propValue['@@toStringTag'] === 'Symbol') {

package.json

 {
   "name": "prop-types",
-  "version": "15.7.1",
+  "version": "15.7.2",
   "description": "Runtime type checking for React props and similar objects.",
@@ -28,2 +28,3 @@ "main": "index.js",
   "dependencies": {
+    "loose-envify": "^1.4.0",
     "object-assign": "^4.1.1",
@@ -33,3 +34,6 @@ "react-is": "^16.8.1"
   "scripts": {
-    "test": "jest",
+    "pretest": "npm run lint",
+    "lint": "eslint .",
+    "test": "npm run tests-only",
+    "tests-only": "jest",
     "umd": "NODE_ENV=development browserify index.js -t loose-envify --standalone PropTypes -o prop-types.js",
@@ -43,6 +47,6 @@ "umd-min": "NODE_ENV=production browserify index.js -t loose-envify -t uglifyify --standalone PropTypes  -p bundle-collapser/plugin -o | uglifyjs --compress unused,dead_code -o prop-types.min.js",
     "babel-preset-react": "^6.24.1",
-    "browserify": "^14.3.0",
+    "browserify": "^16.2.3",
     "bundle-collapser": "^1.2.1",
+    "eslint": "^5.13.0",
     "jest": "^19.0.2",
-    "loose-envify": "^1.4.0",
     "react": "^15.5.1",
@@ -49,0 +53,0 @@ "uglifyify": "^3.0.4",

prop-types.js

@@ -500,3 +500,4 @@ (function(f){if(typeof exports==="object"&&typeof module!=="undefined"){module.exports=f()}else if(typeof define==="function"&&define.amd){define([],f)}else{var g;if(typeof window!=="undefined"){g=window}else if(typeof global!=="undefined"){g=global}else if(typeof self!=="undefined"){g=self}else{g=this}g.PropTypes = f()}})(function(){var define,module,exports;return (function e(t,n,r){function s(o,u){if(!n[o]){if(!t[o]){var a=typeof require=="function"&&require;if(!u&&a)return a(o,!0);if(i)return i(o,!0);var f=new Error("Cannot find module '"+o+"'");throw f.code="MODULE_NOT_FOUND",f}var l=n[o]={exports:{}};t[o][0].call(l.exports,function(e){var n=t[o][1][e];return s(n?n:e)},l,l.exports,e,t,n,r)}return n[o].exports}var i=typeof require=="function"&&require;for(var o=0;o<r.length;o++)s(r[o]);return s})({1:[function(require,module,exports){
       var valuesString = JSON.stringify(expectedValues, function replacer(key, value) {
-        if (getPropType(value) === 'symbol') {
+        var type = getPreciseType(value);
+        if (type === 'symbol') {
           return String(value);
@@ -679,2 +680,7 @@ }
 
+    // falsy value can't be a Symbol
+    if (!propValue) {
+      return false;
+    }
+
     // 19.4.3.5 Symbol.prototype[@@toStringTag] === 'Symbol'
@@ -681,0 +687,0 @@ if (propValue['@@toStringTag'] === 'Symbol') {

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

97691

increased by0.62%

Lines of code

1936

increased by0.52%

Number of low supply chain risk alerts

16

decreased by-23.81%

Worsened metrics

Dependency count

3

increased by50%

Dependency changes

• + Addedloose-envify@^1.4.0

• + Addedjs-tokens@4.0.0(transitive)

• + Addedloose-envify@1.4.0(transitive)