svg-sprite - npm Package Compare versions

Comparing version 1.5.1 to 1.5.2

docs/configuration.md

@@ -275,3 +275,3 @@ svg-sprite [![NPM version][npm-image]][npm-url] [![Build Status][ci-image]][ci-url] [![Coverage Status][coveralls-image]][coveralls-url] [![Dependency Status][depstat-image]][depstat-url] [![Development Dependency Status][devdepstat-image]][devdepstat-url]
 
-The callbacks are processed synchronously and in the given order. Each one gets passed the sprite's SVG source as its first (and only) argument and is expected to return the modified SVG source after transformation. It's completely up to what you do with the SVG source, just don't forget to return it in the end. You may e.g. run some regex or even full-blown DOM operations on the SVG contents (*svg-sprite* depends on [xmldom](https://github.com/jindw/xmldom), so you may require a parser instance `var DOMParser = require('xmldom').DOMParser; /* ... */` within your callback ...).
+The callbacks are processed synchronously and in the given order. Each one gets passed the sprite's SVG source as its first (and only) argument and is expected to return the modified SVG source after transformation. It's completely up to what you do with the SVG source, just don't forget to return it in the end. You may e.g. run some regex or even full-blown DOM operations on the SVG contents (*svg-sprite* depends on [xmldom](https://github.com/xmldom/xmldom), so you may require a parser instance `var DOMParser = require('@xmldom/xmldom').DOMParser; /* ... */` within your callback ...).
 
@@ -278,0 +278,0 @@

lib/svg-sprite/config.js

@@ -104,3 +104,3 @@ 'use strict';
                     winston.format.timestamp({
-                        format: 'YYYY-MM-DD HH:MM:ss'
+                        format: 'YYYY-MM-DD HH:MM:ss.SSS'
                     }),
@@ -107,0 +107,0 @@ winston.format.splat(),

lib/svg-sprite/shape.js

@@ -16,3 +16,3 @@ 'use strict';
 util						= require('util'),
-xmldom						= require('xmldom'),
+xmldom						= require('@xmldom/xmldom'),
 DOMParser					= xmldom.DOMParser,
@@ -19,0 +19,0 @@ XMLSerializer				= xmldom.XMLSerializer,

package.json

 {
   "name": "svg-sprite",
-  "version": "1.5.1",
+  "version": "1.5.2",
   "author": "Joschi Kuphal <[e-mail]> (https://jkphl.is)",
@@ -41,3 +41,4 @@ "description": "SVG sprites & stacks galore — A low-level Node.js module that takes a bunch of SVG files, optimizes them and bakes them into SVG sprites of several types along with suitable stylesheet resources (e.g. CSS, Sass, LESS, Stylus, etc.)",
   "dependencies": {
-    "async": "^3.2.0",
+    "@xmldom/xmldom": "^0.7.2",
+    "async": "^3.2.1",
     "css-selector-parser": "^1.4.1",
@@ -56,3 +57,2 @@ "cssmin": "^0.4.3",
     "winston": "^3.3.3",
-    "xmldom": "0.6.0",
     "xpath": "^0.0.32",
@@ -64,3 +64,3 @@ "yargs": "^15.4.1"
     "istanbul": "^0.4.5",
-    "jshint": "^2.13.0",
+    "jshint": "^2.13.1",
     "less": "^3.13.1",
@@ -67,0 +67,0 @@ "mocha": "^7.2.0",

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

303964

increased by0.01%

Number of medium supply chain risk alerts

1

decreased by-50%

Dependency changes

• + Added@xmldom/xmldom@^0.7.2

• + Added@xmldom/xmldom@0.7.13(transitive)

• - Removedxmldom@0.6.0

• - Removedxmldom@0.6.0(transitive)

• Updatedasync@^3.2.1