urlparse-template - npm Package Compare versions

Comparing version 0.0.2 to 0.1.0

lib/index.js

@@ -24,3 +24,3 @@ var ut = require('url-template'),
         Object.keys(res).forEach(function (k) {
-            if (typeof res[k] === 'string') {
+            if (k !== 'href' && k !== 'path' && k !== 'pathname' && typeof res[k] === 'string') {
                 res[k] = decodeURIComponent(res[k]);
@@ -27,0 +27,0 @@ }

package.json

 {
   "name": "urlparse-template",
-  "version": "0.0.2",
+  "version": "0.1.0",
   "description": "Template-based URL-parsing",
@@ -12,3 +12,3 @@ "main": "lib/index.js",
   },
-  "repository": "https://github.com/msiebuhr/node-urlparse-tempate.git",
+  "repository": "https://github.com/msiebuhr/node-urlparse-template.git",
   "keywords": [
@@ -15,0 +15,0 @@ "url",

test/basic.js

@@ -64,1 +64,9 @@ var assert = require('chai').assert,
 });
+
+describe('does not touch the non-atomic parts of the parsed url', function () {
+    var tpl = p('http://foo.com/{?url}');
+    it('leaves chars encoded by url-template alone in href', function () {
+        var out = tpl({url: 'http://bar.com/?quux=baz&blah=blerg'});
+        assert.propertyVal(out, 'href', 'http://foo.com/?url=http%3A%2F%2Fbar.com%2F%3Fquux%3Dbaz%26blah%3Dblerg');
+    });
+});

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

28319

1.61%

Lines of code

709

1%

Worsened metrics

Number of low supply chain risk alerts

2

100%

Number of medium supply chain risk alerts

1

Infinity%

No dependency changes