riot-tmpl - npm Package Compare versions

Comparing version 2.3.22 to 2.4.0-beta

CHANGELOG.md

 # riot-tmpl Changes
 
+### v2.4.0
+- It closes [riot#1076](https://github.com/riot/riot/issues/1076) using a fork of [notevil](https://github.com/mmckegg/notevil)
+
 ### v2.3.22
@@ -4,0 +7,0 @@ - It has changed the character used to hide quoted strings and regexes, maybe this fix [riot#1588](https://github.com/riot/riot/issues/1588) : Syntax Error: Invalid character `\0129` (riot+compiler.min).

dist/es6.tmpl.js

 
 /**
  * The riot template engine
- * @version v2.3.22
+ * @version v2.4.0-beta
  */
-
 /**
@@ -255,3 +254,6 @@ * riot.util.brackets
 
-    return new Function('E', expr + ';')    //eslint-disable-line no-new-func
+/* eslint-disable */
+
+    return new Function('E', expr + ';')
+/* eslint-enable */
   }
@@ -419,3 +421,3 @@
 
-  _tmpl.version = brackets.version = 'v2.3.22'
+  _tmpl.version = brackets.version = 'v2.4.0-beta'
 
@@ -422,0 +424,0 @@ return _tmpl

dist/riot.tmpl.js

 
 /**
  * The riot template engine
- * @version v2.3.22
+ * @version v2.4.0-beta
  */
-
 /**
@@ -251,3 +250,6 @@ * riot.util.brackets
 
-    return new Function('E', expr + ';')    //eslint-disable-line no-new-func
+/* eslint-disable */
+
+    return new Function('E', expr + ';')
+/* eslint-enable */
   }
@@ -415,3 +417,3 @@
 
-  _tmpl.version = brackets.version = 'v2.3.22'
+  _tmpl.version = brackets.version = 'v2.4.0-beta'
 
@@ -418,0 +420,0 @@ return _tmpl

dist/tmpl.js

@@ -1,5 +0,5 @@
-/* riot-tmpl v2.3.22, @license MIT, (c) 2015 Muut Inc. + contributors */
+
+/* riot-tmpl v2.4.0-beta, @license MIT, (c) 2015 Muut Inc. + contributors */
 ;(function (window) {     // eslint-disable-line no-extra-semi
   'use strict'
-
   /**
@@ -249,3 +249,6 @@ * riot.util.brackets
 
-      return new Function('E', expr + ';')    //eslint-disable-line no-new-func
+  /* eslint-disable */
+
+      return new Function('E', expr + ';')
+  /* eslint-enable */
     }
@@ -417,3 +420,3 @@
 
-  tmpl.version = brackets.version = 'v2.3.22'
+  tmpl.version = brackets.version = 'v2.4.0-beta'
 
@@ -420,0 +423,0 @@ /* istanbul ignore else */

package.json

 {
   "name": "riot-tmpl",
-  "version": "2.3.22",
+  "version": "2.4.0-beta",
   "description": "The riot template engine",
@@ -31,9 +31,11 @@ "main": "dist/tmpl.js",
   "devDependencies": {
-    "coveralls": "^2.11.8",
-    "eslint": "^2.3.0",
+    "coveralls": "^2.11.9",
+    "eslint": "^2.8.0",
+    "esprima": "^2.7.2",
     "expect.js": "^0.3.1",
-    "istanbul": "^0.4.2",
+    "hoister": "0.0.2",
+    "istanbul": "^0.4.3",
     "jspreproc": "^0.2.7",
-    "karma": "^0.13.21",
-    "karma-browserstack-launcher": "^0.1.6",
+    "karma": "^0.13.22",
+    "karma-browserstack-launcher": "^0.1.11",
     "karma-coverage": "^0.5.5",
@@ -43,4 +45,7 @@ "karma-mocha": "^0.2.2",
     "mocha": "^2.4.5",
-    "phantomjs": "^2.1.3",
-    "riot-bump": "^1.0.0"
+    "phantomjs-prebuilt": "^2.1.7",
+    "riot-bump": "^1.0.0",
+    "rollup": "^0.26.0",
+    "rollup-plugin-commonjs": "^2.2.1",
+    "rollup-plugin-node-resolve": "^1.5.0"
   },
@@ -52,3 +57,4 @@ "author": "Muut, Inc. and other contributors",
   },
-  "homepage": "https://github.com/riot/tmpl#readme"
+  "homepage": "https://github.com/riot/tmpl#readme",
+  "dependencies": {}
 }

src/index.js

@@ -0,1 +1,6 @@
+//#if CSP
+// note that the path must be relative to the dist/ folder
+import safeEval from '../src/notevil' //eslint-disable-line no-unused-vars
+//#endif
+
 //#if 0
@@ -17,3 +22,2 @@ /* global tmpl, brackets, window */
 //#endif
-
   //#include brackets
@@ -20,0 +24,0 @@

src/tmpl.js

@@ -148,6 +148,11 @@ /**
 //#endif
-
+/* eslint-disable */
+//#if CSP
+    return safeEval.func('E', expr + ';')
+//#else
     // Now, we can create the function to return by calling the Function constructor.
     // The parameter `E` is the error handler for runtime only.
-    return new Function('E', expr + ';')    //eslint-disable-line no-new-func
+    return new Function('E', expr + ';')
+//#endif
+/* eslint-enable */
   }
@@ -154,0 +159,0 @@

test/runner.js

 var isNode = typeof window === 'undefined'
 
-describe('Observable Tests', function () {
+describe('Tmpl Tests', function () {
   if (isNode) {
+    var _ =  require('../dist/tmpl')
     expect = require('expect.js')
-    tmpl = require('../dist/tmpl').tmpl
-    brackets = require('../dist/tmpl').brackets
+    tmpl = _.tmpl
+    brackets = _.brackets
     require('./specs/core.specs.js')
@@ -9,0 +10,0 @@ require('./specs/brackets.specs.js')

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

376486

increased by206.37%

Number of package files

24

increased by26.32%

Lines of code

9265

increased by226.23%

Worsened metrics

Dev dependency count

18

increased by38.46%

Number of low quality alerts

1

increased byInfinity%

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes