unexpected - npm Package Compare versions

Comparing version 10.7.0 to 10.8.0

lib/makePromise.js

@@ -95,3 +95,3 @@ /*global Promise:true*/
     var originalFn = Promise[staticMethodName];
-    if (!originalFn && staticMethodName === 'settle') {
+    if (staticMethodName === 'settle') {
         originalFn = function (promises) {
@@ -98,0 +98,0 @@ return Promise.all(promises.map(function (promise) {

lib/Unexpected.js

@@ -214,2 +214,15 @@ var createStandardErrorMessage = require('./createStandardErrorMessage');
                 });
+            }) && !groupEvaluations.some(function (groupEvaluation) {
+                // If one of the or groups has a bubbleThrough error as the
+                // first failing assertion, fail the whole expect.it:
+                for (var i = 0 ; i < groupEvaluation.length ; i += 1) {
+                    var evaluation = groupEvaluation[i];
+                    if (evaluation.promise.isRejected()) {
+                        if (evaluation.promise.reason().errorMode === 'bubbleThrough') {
+                            return true;
+                        } else {
+                            break;
+                        }
+                    }
+                }
             });
@@ -915,3 +928,2 @@
         message: function (output) {
-
             output.error("Unknown assertion '").jsString(testDescriptionString)
@@ -918,0 +930,0 @@ .error("', did you mean: '").jsString(bestMatch.assertion).error("'");

package.json

 {
   "name": "unexpected",
-  "version": "10.7.0",
+  "version": "10.8.0",
   "author": "Sune Sloth Simonsen <[e-mail]>",
@@ -5,0 +5,0 @@ "keywords": [

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

751593

increased by2.51%

Lines of code

18927

increased by2.5%

Number of low supply chain risk alerts

11

decreased by-8.33%

Worsened metrics

Number of medium supply chain risk alerts

7

increased by16.67%

No dependency changes