terser - npm Package Compare versions

Comparing version 3.10.4 to 3.10.5

lib/scope.js

@@ -71,9 +71,7 @@ /***********************************************************************
             || !options.eval && this.scope.pinned()
-            || (options.keep_fnames instanceof RegExp && options.keep_fnames.test(this.orig[0].name) || options.keep_fnames === true)
-                && (this.orig[0] instanceof AST_SymbolLambda
-                    || this.orig[0] instanceof AST_SymbolDefun)
+            || (this.orig[0] instanceof AST_SymbolLambda
+                  || this.orig[0] instanceof AST_SymbolDefun) && keep_name(options.keep_fnames, this.orig[0].name)
             || this.orig[0] instanceof AST_SymbolMethod
-            || (options.keep_classnames instanceof RegExp && options.keep_classnames.test(this.orig[0].name) || options.keep_classnames === true)
-                && (this.orig[0] instanceof AST_SymbolClass
-                    || this.orig[0] instanceof AST_SymbolDefClass);
+            || (this.orig[0] instanceof AST_SymbolClass
+                  || this.orig[0] instanceof AST_SymbolDefClass) && keep_name(options.keep_classnames, this.orig[0].name);
     },
@@ -391,3 +389,5 @@ mangle: function(options) {
             s.functions.each(function(d) {
-                push_uniq(def.scope.enclosed, d);
+                if (keep_name(options.keep_fnames, d.name)) {
+                    push_uniq(def.scope.enclosed, d);
+                }
             });
@@ -394,0 +394,0 @@ }

lib/utils.js

@@ -345,1 +345,6 @@ /***********************************************************************
 }
+
+function keep_name(keep_setting, name) {
+    return keep_setting === true
+        || (keep_setting instanceof RegExp && keep_setting.test(name));
+}

package.json

@@ -7,3 +7,3 @@ {
   "license": "BSD-2-Clause",
-  "version": "3.10.4",
+  "version": "3.10.5",
   "engines": {
@@ -42,3 +42,3 @@ "node": ">=0.8.0"
     "mocha": "^3.0.0",
-    "mochallel": "^1.7.8",
+    "mochallel": "^1.7.9",
     "multiprocess-map": "^1.4.2",
@@ -45,0 +45,0 @@ "pre-commit": "^1.2.2",

tools/node.js

 var fs = require("fs");
-var istanbul = require("istanbul");
 
@@ -22,3 +21,6 @@ var UglifyJS = exports;
 
-var instrumenter = new istanbul.Instrumenter();
+try {
+    var istanbul = require("istanbul");
+    var instrumenter = new istanbul.Instrumenter();
+} catch (ex) {}
 
@@ -28,3 +30,3 @@ new Function("MOZ_SourceMap", "exports", function() {
         var contents = fs.readFileSync(file, "utf8");
-        if (global.__IS_TESTING__) return instrumenter.instrumentSync(contents, file);
+        if (instrumenter && global.__IS_TESTING__) return instrumenter.instrumentSync(contents, file);
         return contents;
@@ -31,0 +33,0 @@ });

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4987003

increased by0.03%

Lines of code

42847

increased by0.03%

No dependency changes