Comparing version 2.0.0 to 2.0.1
@@ -28,3 +28,3 @@ /*! | ||
var keys = split(prop, {sep: '.', brackets: true}); | ||
var keys = split(prop, {sep: '.', brackets: true}).filter(isValidKey); | ||
var len = keys.length; | ||
@@ -53,1 +53,5 @@ var idx = -1; | ||
}; | ||
function isValidKey(key) { | ||
return key !== '__proto__' && key !== 'constructor' && key !== 'prototype'; | ||
} |
{ | ||
"name": "set-value", | ||
"description": "Create nested values and any intermediaries using dot notation (`'a.b.c'`) paths.", | ||
"version": "2.0.0", | ||
"version": "2.0.1", | ||
"homepage": "https://github.com/jonschlinkert/set-value", | ||
@@ -6,0 +6,0 @@ "author": "Jon Schlinkert (https://github.com/jonschlinkert)", |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
Deprecated
MaintenanceThe maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.
Found 1 instance in 1 package
10322
45
0
1