rtcpeerconnection - npm Package Compare versions

Comparing version 5.2.0 to 5.2.1

package.json

 {
   "name": "rtcpeerconnection",
-  "version": "5.2.0",
+  "version": "5.2.1",
   "description": "A tiny browser module that normalizes and simplifies the API for WebRTC peer connections.",
@@ -19,5 +19,6 @@ "main": "rtcpeerconnection.js",
   "dependencies": {
+    "lodash.clonedeep": "^4.3.2",
     "sdp-jingle-json": "^3.0.0",
     "traceablepeerconnection": "^1.1.6",
-    "webrtc-adapter": "^1.0",
+    "webrtc-adapter": "^2.0.2",
     "wildemitter": "1.x"
@@ -24,0 +25,0 @@ },

rtcpeerconnection.js

@@ -6,2 +6,3 @@ var util = require('util');
 var adapter = require('webrtc-adapter');
+var cloneDeep = require('lodash.clonedeep');
 
@@ -664,4 +665,5 @@ function PeerConnection(config, constraints) {
                 // not safe to do when doing simulcast mangling
-                self.emit('answer', expandedAnswer);
-                cb(null, expandedAnswer);
+                var copy = cloneDeep(expandedAnswer);
+                self.emit('answer', copy);
+                cb(null, copy);
             }
@@ -712,4 +714,5 @@ self._candidateBuffer = [];
                     if (!self.assumeSetLocalSuccess) {
-                        self.emit('answer', expandedAnswer);
-                        cb(null, expandedAnswer);
+                        var copy = cloneDeep(expandedAnswer);
+                        self.emit('answer', copy);
+                        cb(null, copy);
                     }
@@ -716,0 +719,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

360146

increased by50.74%

Lines of code

9676

increased by58.81%

Worsened metrics

Dependency count

5

increased by25%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedlodash.clonedeep@^4.3.2

• + Addedlodash.clonedeep@4.5.0(transitive)

• + Addedwebrtc-adapter@2.1.0(transitive)

• Updatedwebrtc-adapter@^2.0.2