Socket
Socket
Sign inDemoInstall

standard

Package Overview
Dependencies
319
Maintainers
17
Versions
183
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 10.0.0 to 10.0.1

1

AUTHORS.md

@@ -91,3 +91,4 @@ # Authors

- Wayou Liu (liuwayong@gmail.com)
- Thomas Watson (w@tson.dk)
#### Generated by bin/update-authors.sh.

27

CHANGELOG.md

@@ -6,5 +6,9 @@ # Change Log

## 10.0.1 - 2017-04-06
- Internal changes (incremented dependency versions)
## 10.0.0 - 2017-04-04
**Standard is turning 10.0.0!** 🎉
**`standard` just turned 10.0.0!** 🎉

@@ -24,15 +28,16 @@ As with every new major release, there are lots of new rules in 10.0.0 designed to

console in recent versions of Node.js. This often confuses users and leads to
unecessary support tickets for project maintainers.
unnecessary support tickets for project maintainers.
Some deprecated APIs are even insecure (or at least prone to incorrect usage) which
can have serious security implications. For that reason, `standard` now prevents
usage of `Buffer(num)` or `new Buffer(num)` since these functions return uninitialized
program memory which could contain private user information, secret keys, etc.
Instead of `Buffer(num)` use the new `Buffer.alloc(num)` or `Buffer.from(obj)`
functions which make programmer intent clearer and work in all currently supported
versions of Node.js, including Node.js 4.x. For more background,
can have serious security implications. For that reason, `standard` now considers
usage of `Buffer(num)` to be an error, since this function returns uninitialized
program memory which could contain confidential information like passwords or keys.
Instead of `Buffer(num)`, consider using `Buffer.alloc(num)` or `Buffer.from(obj)`
which make the programmer's intent clearer. These functions exist in all currently
supported versions of Node.js, including Node.js 4.x. For more background,
[see this Node.js issue](https://github.com/nodejs/node/issues/4660).
We also improved some rules to support common patterns in codebases that use React,
JSX, and Flow.
We also improved some rules to support common patterns in code bases that use
React, JSX, and Flow.

@@ -52,3 +57,3 @@ When you upgrade, consider running `standard --fix` to automatically fix some of

- Disallow using deprecated Node.js APIs ([node/no-deprecated-api](https://github.com/mysticatea/eslint-plugin-node/blob/master/docs/rules/no-deprecated-api.md)) [#693](https://github.com/feross/standard/issues/693) (13%)
- Ensures that code always runs without warnings on the lastest versions of Node
- Ensures that code always runs without warnings on the latest versions of Node.js
- Ensures that safe Buffer methods (`Buffer.from()`, `Buffer.alloc()`) are used instead of `Buffer()`

@@ -55,0 +60,0 @@ - Enforce callbacks always called with Node.js-style error first ([standard/no-callback-literal](https://github.com/xjamundx/eslint-plugin-standard#rules-explanations)) [#623](https://github.com/feross/standard/issues/623) (3%)

{
"name": "standard",
"description": "JavaScript Standard Style",
"version": "10.0.0",
"version": "10.0.1",
"author": {

@@ -16,4 +16,4 @@ "email": "feross@feross.org",

"eslint": "~3.19.0",
"eslint-config-standard": "10.0.0",
"eslint-config-standard-jsx": "3.3.0",
"eslint-config-standard": "10.2.0",
"eslint-config-standard-jsx": "4.0.1",
"eslint-plugin-import": "~2.2.0",

@@ -23,3 +23,3 @@ "eslint-plugin-node": "~4.2.2",

"eslint-plugin-react": "~6.10.0",
"eslint-plugin-standard": "~2.2.0",
"eslint-plugin-standard": "~3.0.1",
"standard-engine": "~7.0.0"

@@ -26,0 +26,0 @@ },

@@ -679,3 +679,3 @@ <h1 align="center">

Join other contributors in `#standard` on freenode to chat!
Want to chat? Join contributors on IRC in the `#standard` channel on freenode.

@@ -682,0 +682,0 @@ Here are some important packages in the `standard` ecosystem:

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc