snabbdom-virtualize - npm Package Compare versions

Comparing version 0.5.0 to 0.5.1

lib/strings.js

@@ -42,3 +42,3 @@ 'use strict';
 
-var _parse = require('html-parse-stringify/lib/parse');
+var _parse = require('html-parse-stringify2/lib/parse');
 
@@ -45,0 +45,0 @@ var _parse2 = _interopRequireDefault(_parse);

lib/utils.js

@@ -16,3 +16,3 @@ 'use strict';
 function createTextVNode(text) {
-    return (0, _vnode2.default)(undefined, undefined, undefined, text);
+    return (0, _vnode2.default)(undefined, undefined, undefined, unescape(text));
 }
@@ -28,2 +28,14 @@
     return '' + firstChar + name.substring(1);
+}
+
+// Regex for matching HTML entities.
+var entityRegex = new RegExp('&[a-z0-9]+;', 'gi');
+// Element for setting innerHTML for transforming entities.
+var el = document.createElement('div');
+
+function unescape(text) {
+    return text.replace(entityRegex, function (entity) {
+        el.innerHTML = entity;
+        return el.textContent;
+    });
 }

package.json

 {
   "name": "snabbdom-virtualize",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Library for turning strings and DOM nodes into virtual DOM nodes compatible with snabbdom.",
@@ -47,4 +47,4 @@ "author": {
   "dependencies": {
-    "html-parse-stringify": "https://github.com/rayd/html-parse-stringify.git#7a9d6b4fb5eda23a7f8be0c5d5202da7b858b07e"
+    "html-parse-stringify2": "^1.1.0"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

14570

increased by1.92%

Lines of code

266

increased by3.91%

Number of high supply chain risk alerts

0

decreased by-100%

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• + Addedhtml-parse-stringify2@^1.1.0

• + Addedhtml-parse-stringify2@1.2.1(transitive)

• + Addedvoid-elements@1.0.0(transitive)

• - Removedhtml-parse-stringify@https://github.com/rayd/html-parse-stringify.git#7a9d6b4fb5eda23a7f8be0c5d5202da7b858b07e