stream-json
Advanced tools
Comparing version 1.6.0 to 1.6.1
{ | ||
"name": "stream-json", | ||
"version": "1.6.0", | ||
"version": "1.6.1", | ||
"description": "stream-json is the micro-library of Node.js stream components for creating custom JSON processing pipelines with a minimal memory footprint. It can parse JSON files far exceeding available memory streaming individual primitives using a SAX-inspired API. Includes utilities to stream JSON database dumps.", | ||
@@ -12,3 +12,3 @@ "homepage": "http://github.com/uhop/stream-json", | ||
"dependencies": { | ||
"stream-chain": "^2.2.1" | ||
"stream-chain": "^2.2.3" | ||
}, | ||
@@ -38,3 +38,10 @@ "devDependencies": { | ||
"author": "Eugene Lazutkin <eugene.lazutkin@gmail.com> (http://lazutkin.com/)", | ||
"license": "BSD-3-Clause" | ||
"license": "BSD-3-Clause", | ||
"files": [ | ||
"/*.js", | ||
"/filters", | ||
"/jsonl", | ||
"/streamers", | ||
"/utils" | ||
] | ||
} |
@@ -115,2 +115,3 @@ # stream-json [![NPM version][npm-image]][npm-url] | ||
- 1.6.1 *the technical release, no need to upgrade.* | ||
- 1.6.0 *added `jsonl/Parser` and `jsonl/Stringer`.* | ||
@@ -117,0 +118,0 @@ - 1.5.0 *`Disassembler` and streamers now follow `JSON.stringify()` and `JSON.parse()` protocols respectively including `replacer` and `reviver`.* |
Uses eval
Supply chain riskPackage uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
154
0
0
87061
24
2214
Updatedstream-chain@^2.2.3