unexpected - npm Package Compare versions

Comparing version 3.2.4 to 4.0.0

lib/index.js

@@ -1,45 +0,6 @@
-/*global console, __dirname, weknowhow, Uint8Array, Uint16Array*/
-var Path = require('path'),
-    fs = require('fs'),
-    vm = require('vm'),
-    isCoverage = !!process.env.COVERAGE,
-    context = !isCoverage && vm.createContext({
-        console: console,
-        Buffer: Buffer,
-        // Reuse the existing context's globals so instanceof checks work:
-        Object: Object,
-        Array: Array,
-        Error: Error,
-        RegExp: RegExp,
-        Date: Date,
-        String: String,
-        Number: Number,
-        Math: Math,
-        Boolean: Boolean,
-        Function: Function,
-        Uint8Array: Uint8Array,
-        Uint16Array: Uint16Array
-    });
+var Unexpected = require('./Unexpected');
 
-[
-    'unexpected-namespace.js',
-    'unexpected-es5-compatible.js',
-    'unexpected-utils.js',
-    'unexpected-core.js',
-    'unexpected-types.js',
-    'unexpected-assertions.js',
-    'unexpected-module.js'
-].forEach(function (fileName) {
-    try {
-        var src = fs.readFileSync(Path.resolve(__dirname, fileName), 'utf-8');
-        if (isCoverage) {
-            vm.runInThisContext(src, fileName);
-        } else {
-            vm.runInContext(src, context, fileName);
-        }
-    } catch (err) {
-        console.error('Error loading ' + fileName + ': ' + err.stack);
-    }
-});
-
-module.exports = isCoverage ? weknowhow.expect : context.weknowhow.expect;
+module.exports = Unexpected.create()
+    .installPlugin(require('./colors'))
+    .installPlugin(require('./types'))
+    .installPlugin(require('./assertions'));

package.json

 {
   "name": "unexpected",
-  "version": "3.2.4",
+  "version": "4.0.0",
   "author": "Sune Sloth Simonsen <[e-mail]>",
@@ -21,11 +21,17 @@ "keywords": [
   "main": "./lib/index.js",
-  "dependencies": {},
+  "dependencies": {
+    "magicpen": "=0.3.2"
+  },
   "devDependencies": {
+    "browserify": "=5.9.1",
+    "bundle-collapser": "^1.1.0",
+    "coveralls": "^2.11.1",
+    "istanbul": "^0.3.0",
     "jshint": "*",
     "mocha": "=1.17.1",
-    "phantomjs": "=1.9.1-0",
     "mocha-phantomjs": "=3.1.0",
     "mocha-slow-reporter": "*",
+    "phantomjs": "=1.9.1-0",
     "serve": "*"
   }
 }

README.md

@@ -14,3 +14,6 @@ # Unexpected
 
+[![NPM version](https://badge.fury.io/js/unexpected.png)](http://badge.fury.io/js/unexpected)
 [![Build Status](https://travis-ci.org/sunesimonsen/unexpected.png)](https://travis-ci.org/sunesimonsen/unexpected)
+[![Coverage Status](https://coveralls.io/repos/sunesimonsen/unexpected/badge.png)](https://coveralls.io/r/sunesimonsen/unexpected)
+[![Dependency Status](https://david-dm.org/sunesimonsen/unexpected.png)](https://david-dm.org/sunesimonsen/unexpected)
 
@@ -627,26 +630,4 @@ [Run the test in the browser](http://sunesimonsen.github.io/unexpected/test/tests.production.html)
 
-(The MIT License)
+MIT, see the `LICENSE` file for details
 
-Copyright (c) 2013 Sune Simonsen <[e-mail]>
-
-Permission is hereby granted, free of charge, to any person
-obtaining a copy of this software and associated documentation
-files (the 'Software'), to deal in the Software without
-restriction, including without limitation the rights to use, copy,
-modify, merge, publish, distribute, sublicense, and/or sell copies
-of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be
-included in all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED 'AS IS', WITHOUT WARRANTY OF ANY KIND,
-EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
-NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
-BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
-ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
-
 ### 3rd-party
@@ -653,0 +634,0 @@

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

474165

increased by39.28%

Lines of code

11591

increased by68.03%

Worsened metrics

Dependency count

1

increased byInfinity%

Dev dependency count

10

increased by66.67%

Number of lines in readme file

635

decreased by-2.91%

Number of low supply chain risk alerts

13

increased by225%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedmagicpen@=0.3.2