unipept-heatmap - npm Package Compare versions

Comparing version 1.0.18 to 1.0.19

package.json

 {
   "name": "unipept-heatmap",
-  "version": "1.0.18",
+  "version": "1.0.19",
   "description": "HeatMap built for the Unipept project. See http://unipept.ugent.be for more information. This HeatMap supports UPGMA-clustering and MOLO-reordering.",
@@ -8,3 +8,5 @@ "main": "dist/bundle.js",
   "dependencies": {
-    "d3": "^5.7.0"
+    "@types/sanitize-html": "^1.18.3",
+    "d3": "^5.7.0",
+    "sanitize-html": "^1.20.0"
   },
@@ -16,3 +18,3 @@ "devDependencies": {
     "@types/jest": "^24.0.9",
-    "@types/node": "^10.12.17",
+    "@types/node": "^10.14.4",
     "babel-loader": "^8.0.5",
@@ -19,0 +21,0 @@ "d3": "^5.7.0",

src/heatmap/heatmapSettings.ts

 import Settings from "../settings";
 import {HeatmapElement, HeatmapValue} from "./input";
+let sanitizeHtml = require("sanitize-html");
 
@@ -44,3 +45,3 @@ export class HeatmapSettings extends Settings {
     getTooltipTitle: (x: HeatmapValue, row: HeatmapElement, column: HeatmapElement) => string = (x: HeatmapValue, row: HeatmapElement, column: HeatmapElement) => {
-        return `${column.name ? column.name : ''}${column.name ? ' and ' : ''}${row.name ? row.name : ''}`;
+        return sanitizeHtml(`${column.name ? column.name : ''}${column.name ? ' and ' : ''}${row.name ? row.name : ''}`);
     };
@@ -50,4 +51,4 @@
     getTooltipText: (x: HeatmapValue) => string = (x: HeatmapValue) => {
-        return `Score: ${(x.value * 100).toFixed(2)}%`;
+        return sanitizeHtml(`Score: ${(x.value * 100).toFixed(2)}%`);
     };
 }

tsconfig.json

@@ -12,4 +12,4 @@ {
     "declaration": true,
-    "types": ["jest", "d3"]
+    "types": ["jest", "d3", "node", "sanitize-html"]
   }
 }

New alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4900766

increased by100.26%

Worsened metrics

Dependency count

3

increased by200%

Lines of code

2072

decreased by-91.42%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Added@types/sanitize-html@^1.18.3

• + Addedsanitize-html@^1.20.0

• + Added@types/sanitize-html@1.27.2(transitive)

• + Addeddom-serializer@1.4.1(transitive)

• + Addeddomelementtype@2.3.0(transitive)

• + Addeddomhandler@3.3.04.3.1(transitive)

• + Addeddomutils@2.8.0(transitive)

• + Addedentities@2.2.0(transitive)

• + Addedhtmlparser2@4.1.0(transitive)

• + Addedlodash@4.17.21(transitive)

• + Addedparse-srcset@1.0.2(transitive)

• + Addedpicocolors@0.2.1(transitive)

• + Addedpostcss@7.0.39(transitive)

• + Addedsanitize-html@1.27.5(transitive)

• + Addedsource-map@0.6.1(transitive)