remark-usage - npm Package Compare versions

Comparing version 7.0.1 to 8.0.0

lib/generate/config.js

@@ -19,3 +19,3 @@ 'use strict'
     main = resolveFrom(mainRoot, mainId)
-  } catch (error) {}
+  } catch (_) {}
 
@@ -22,0 +22,0 @@ ctx.experimentalModules = settings.experimentalModules || false

lib/generate/find-example.js

@@ -50,3 +50,3 @@ 'use strict'
     filePath = resolveFrom(cwd, moduleId)
-  } catch (error) {}
+  } catch (_) {}
 
@@ -66,3 +66,3 @@ next(filePath)
       filePath = resolveFrom(cwd, examples[index])
-    } catch (error) {
+    } catch (_) {
       continue
@@ -69,0 +69,0 @@ }

lib/generate/instrument.js

@@ -45,6 +45,6 @@ 'use strict'
            * Node 12+ */
-          function(path) {
+          function (path) {
             instrumentMainReference(path.node.source)
           },
-        CallExpression: function(path) {
+        CallExpression: function (path) {
           var callee = path.get('callee')
@@ -51,0 +51,0 @@

lib/generate/tokenize.js

@@ -8,3 +8,3 @@ 'use strict'
   var lineComment = /^\s*\/\/\s*/
-  var ignoreComment = /^remark-usage-ignore-next(?:(?:\s+)(\d+))?/
+  var ignoreComment = /^remark-usage-ignore-next(?:\s+(\d+))?/
   var example = ctx.example
@@ -11,0 +11,0 @@ var start = 0

lib/index.js

@@ -40,3 +40,3 @@ 'use strict'
           fs.unlinkSync(ctx.exampleInstrumentedPath)
-        } catch (error) {}
+        } catch (_) {}
       }
@@ -43,0 +43,0 @@

package.json

 {
   "name": "remark-usage",
-  "version": "7.0.1",
+  "version": "8.0.0",
   "description": "remark plugin to add a usage example to your readme",
@@ -9,2 +9,3 @@ "license": "MIT",
     "remark",
+    "remark-plugin",
     "plugin",
@@ -18,2 +19,6 @@ "mdast",
   "bugs": "https://github.com/remarkjs/remark-usage/issues",
+  "funding": {
+    "type": "opencollective",
+    "url": "https://opencollective.com/unified"
+  },
   "author": "Titus Wormer <[e-mail]> (https://wooorm.com)",
@@ -33,3 +38,3 @@ "contributors": [
     "nanoid": "^2.0.0",
-    "remark-parse": "^6.0.0",
+    "remark-parse": "^7.0.0",
     "resolve-from": "^5.0.0",
@@ -42,14 +47,15 @@ "trough": "^1.0.0",
     "negate": "^1.0.0",
-    "nyc": "^14.0.0",
-    "prettier": "^1.0.0",
-    "remark": "^10.0.0",
-    "remark-cli": "^6.0.0",
-    "remark-preset-wooorm": "^5.0.0",
+    "nyc": "^15.0.0",
+    "prettier": "^2.0.0",
+    "remark": "^11.0.0",
+    "remark-cli": "^7.0.0",
+    "remark-preset-wooorm": "^6.0.0",
     "tape": "^4.0.0",
     "to-vfile": "^6.0.0",
-    "xo": "^0.24.0"
+    "xo": "^0.28.0"
   },
   "scripts": {
     "format:md": "remark . -qfo",
-    "format:js": "prettier --no-config --config ./package.json --write \"**/*.js\" && xo --fix",
+    "#": "xo currently crashes on invalid `package.json`s in fixtures: && xo --fix",
+    "format:js": "prettier --no-config --config ./package.json --write \"**/*.js\"",
     "format": "npm run format:md && npm run format:js",
@@ -77,2 +83,5 @@ "test-api": "node test",
     "esnext": false,
+    "rules": {
+      "unicorn/string-content": "off"
+    },
     "ignore": [
@@ -79,0 +88,0 @@ "example.js",

readme.md

@@ -163,2 +163,8 @@ # remark-usage
 
+## Security
+
+Use of `remark-usage` is unsafe because `main` and `example` are executed.
+This could become dangerous if an attacker was able to inject code into those
+files or their dependencies.
+
 ## Contribute
@@ -170,4 +176,4 @@
 
-This project has a [Code of Conduct][coc].
-By interacting with this repository, organisation, or community you agree to
+This project has a [code of conduct][coc].
+By interacting with this repository, organization, or community you agree to
 abide by its terms.
@@ -203,3 +209,3 @@
 
-[chat-badge]: https://img.shields.io/badge/join%20the%20community-on%20spectrum-7b16ff.svg
+[chat-badge]: https://img.shields.io/badge/chat-spectrum-7b16ff.svg
 
@@ -206,0 +212,0 @@ [chat]: https://spectrum.chat/unified/remark

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

23297

increased by1.78%

Number of lines in readme file

238

increased by2.59%

Number of medium supply chain risk alerts

1

decreased by-50%

Dependency changes

• + Addedremark-parse@7.0.2(transitive)

• - Removedremark-parse@6.0.3(transitive)

• Updatedremark-parse@^7.0.0