resemblejs - npm Package Compare versions

Comparing version 3.0.1 to 3.0.2

package.json

 {
     "name": "resemblejs",
-    "version": "3.0.1",
+    "version": "3.0.2",
     "description": "Image analysis and comparison with HTML5",
@@ -5,0 +5,0 @@ "main": "resemble.js",

resemble.js

@@ -6,3 +6,5 @@ /*
 
-var isNode = new Function("try {return this===global;}catch(e){return false;}");
+var isNode = new Function(
+    "return (typeof process !== 'undefined') && (process.release.name === 'node')"
+);
 
@@ -316,11 +318,14 @@ (function(root, factory) {
 
-                loadNodeCanvasImage(fileDataForImage).then(function(image) {
-                    hiddenImage.onload = null; // fixes pollution between calls
-                    hiddenImage.onerror = null;
-                    onLoadImage(image, callback);
-                })
-                .catch(function(err) {
-                    images.push({ error: err ? err + "" : "Image load error." });
-                    callback();
-                });
+                loadNodeCanvasImage(fileDataForImage)
+                    .then(function(image) {
+                        hiddenImage.onload = null; // fixes pollution between calls
+                        hiddenImage.onerror = null;
+                        onLoadImage(image, callback);
+                    })
+                    .catch(function(err) {
+                        images.push({
+                            error: err ? err + "" : "Image load error."
+                        });
+                        callback();
+                    });
             } else {
@@ -327,0 +332,0 @@ fileReader = new FileReader();

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

46976

0.76%

Number of package files

11

10%

Lines of code

908

0.55%

No dependency changes