twig - npm Package Compare versions

Comparing version 2.0.0 to 3.0.0

.github/workflows/deploy.yml

@@ -32,3 +32,3 @@ # Sample workflow for building and deploying a VitePress site to GitHub Pages
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
@@ -38,9 +38,9 @@ fetch-depth: 0
       - name: Setup Node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v5
         with:
-          node-version: 20
+          node-version: 22
           cache: npm
 
       - name: Setup Pages
-        uses: actions/configure-pages@v4
+        uses: actions/configure-pages@v5
 
@@ -56,3 +56,3 @@ - name: Install dependencies
       - name: Upload artifact
-        uses: actions/upload-pages-artifact@v3
+        uses: actions/upload-pages-artifact@v4
         with:
@@ -72,2 +72,2 @@ path: docs/.vitepress/dist
         id: deployment
-        uses: actions/deploy-pages@v4
+        uses: actions/deploy-pages@v5

.github/workflows/tests.yml

@@ -17,3 +17,2 @@ name: "tests"
         node_js:
-          - 20
           - 22
@@ -24,6 +23,6 @@ - 24
       - name: "Checkout code"
-        uses: "actions/checkout@v3"
+        uses: "actions/checkout@v6"
 
       - name: "Setup Node and npm"
-        uses: "actions/setup-node@v3"
+        uses: "actions/setup-node@v5"
         with:
@@ -30,0 +29,0 @@ cache: "npm"

package.json

@@ -5,3 +5,3 @@ {
   "description": "JS port of the Twig templating language.",
-  "version": "2.0.0",
+  "version": "3.0.0",
   "homepage": "https://github.com/twigjs/twig.js",
@@ -21,3 +21,3 @@ "license": "BSD-2-Clause",
   "engines": {
-    "node": ">=20"
+    "node": ">=22"
   },
@@ -24,0 +24,0 @@ "bin": {

src/twig.factory.js

@@ -6,3 +6,3 @@ // ## twig.factory.js
     const Twig = {
-        VERSION: '2.0.0'
+        VERSION: '3.0.0'
     };
@@ -9,0 +9,0 @@

src/twig.lib.js

@@ -10,6 +10,11 @@ // ## twig.lib.js
 module.exports = function (Twig) {
-    const { sprintf, vsprintf, strip_tags } = require('locutus/php/strings/index');
-    const { round, min, max } = require('locutus/php/math/index');
-    const { strtotime, date } = require('locutus/php/datetime/index');
-    const { boolval } = require('locutus/php/var/index');
+    const { sprintf } = require('locutus/php/strings/sprintf');
+    const { vsprintf } = require('locutus/php/strings/vsprintf');
+    const { strip_tags } = require('locutus/php/strings/strip_tags');
+    const { round } = require('locutus/php/math/round');
+    const { min } = require('locutus/php/math/min');
+    const { max } = require('locutus/php/math/max');
+    const { strtotime } = require('locutus/php/datetime/strtotime');
+    const { date } = require('locutus/php/datetime/date');
+    const { boolval } = require('locutus/php/var/boolval');
 
@@ -16,0 +21,0 @@ // Namespace for libraries

UPGRADING.md

@@ -5,4 +5,8 @@ # Upgrading
 
+## 3.0.0
+
+- Ensure you are using Node.js >= 22
+
 ## 2.0.0
 
 - Ensure you are using Node.js >= 20

New alerts

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 2 instances

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Improved metrics

Number of medium supply chain risk alerts

1

-75%

Worsened metrics

Total package byte prevSize

1179326

-50.14%

Lines of code

15246

-42.2%

No dependency changes