uvm - npm Package Compare versions

Comparing version 1.7.3 to 1.7.4

CHANGELOG.md

 # Postman UVM Changelog
 
+#### v1.7.4 (September 21, 2018)
+- Updated circular-json and other dependencies
+- Housekeeping to remove nsp
+
 #### v1.7.3 (May 23, 2018)
@@ -4,0 +8,0 @@ * Updated dependencies :arrow_up:

lib/uvm/bridge-client.js

@@ -22,4 +22,5 @@ /**
     /*! (C) WebReflection Mit Style License */
-    var CircularJSON=function(e,t,es){function l(e,t,o){var u=[],f=[e],l=[e],c=[o?n:"[Circular]"],h=e,p=1,d;return function(e,v){return t&&(v=t.call(this,e,v)),e!==""&&(h!==this&&(d=p-a.call(f,this)-1,p-=d,f.splice(p,f.length),u.splice(p-1,u.length),h=this),typeof v=="object"&&v?(a.call(f,v)<0&&f.push(h=v),p=f.length,d=a.call(l,v),d<0?(d=l.push(v)-1,o?(u.push((""+e).replace(s,r)),c[d]=n+u.join(n)):c[d]=c[0]):v=c[d]):typeof v=="string"&&o&&(v=v.replace(r,i).replace(n,r))),v}}function c(e,t){for(var r=0,i=t.length;r<i;e=e[t[r++].replace(o,n)]);return e}function h(e){return function(t,s){var o=typeof s=="string";return o&&s.charAt(0)===n?new f(s.slice(1)):(t===""&&(s=v(s,s,{})),o&&(s=s.replace(u,"$1"+n).replace(i,r)),e?e.call(this,t,s):s)}}function p(e,t,n){for(var r=0,i=t.length;r<i;r++)t[r]=v(e,t[r],n);return t}function d(e,t,n){for(var r in t)t.hasOwnProperty(r)&&(t[r]=v(e,t[r],n));return t}function v(e,t,r){return t instanceof Array?p(e,t,r):t instanceof f?t.length?r.hasOwnProperty(t)?r[t]:r[t]=c(e,t.split(n)):e:t instanceof Object?d(e,t,r):t}function m(t,n,r,i){return e.stringify(t,l(t,n,!i),r)}function g(t,n){return e.parse(t,h(n))}var n="~",r=es+"x"+("0"+n.charCodeAt(0).toString(16)).slice(-2),i=es+r,s=new t(r,"g"),o=new t(i,"g"),u=new t("(?:^|([^"+es+es+"]))"+i),a=[].indexOf||function(e){for(var t=this.length;t--&&this[t]!==e;);return t},f=String;return{stringify:m,parse:g}}(JSON,RegExp,String.fromCharCode(92));
+    var CircularJSON=function(JSON,RegExp){var specialChar="~",safeSpecialChar="\\\\x"+("0"+specialChar.charCodeAt(0).toString(16)).slice(-2),escapedSafeSpecialChar="\\\\"+safeSpecialChar,specialCharRG=new RegExp(safeSpecialChar,"g"),safeSpecialCharRG=new RegExp(escapedSafeSpecialChar,"g"),safeStartWithSpecialCharRG=new RegExp("(?:^|([^\\\\\\\\]))"+escapedSafeSpecialChar),indexOf=[].indexOf||function(v){for(var i=this.length;i--&&this[i]!==v;);return i},$String=String;function generateReplacer(value,replacer,resolve){var doNotIgnore=false,inspect=!!replacer,path=[],all=[value],seen=[value],mapp=[resolve?specialChar:"[Circular]"],last=value,lvl=1,i,fn;if(inspect){fn=typeof replacer==="object"?function(key,value){return key!==""&&replacer.indexOf(key)<0?void 0:value}:replacer}return function(key,value){if(inspect)value=fn.call(this,key,value);if(doNotIgnore){if(last!==this){i=lvl-indexOf.call(all,this)-1;lvl-=i;all.splice(lvl,all.length);path.splice(lvl-1,path.length);last=this}if(typeof value==="object"&&value){if(indexOf.call(all,value)<0){all.push(last=value)}lvl=all.length;i=indexOf.call(seen,value);if(i<0){i=seen.push(value)-1;if(resolve){path.push((""+key).replace(specialCharRG,safeSpecialChar));mapp[i]=specialChar+path.join(specialChar)}else{mapp[i]=mapp[0]}}else{value=mapp[i]}}else{if(typeof value==="string"&&resolve){value=value.replace(safeSpecialChar,escapedSafeSpecialChar).replace(specialChar,safeSpecialChar)}}}else{doNotIgnore=true}return value}}function retrieveFromPath(current,keys){for(var i=0,length=keys.length;i<length;current=current[keys[i++].replace(safeSpecialCharRG,specialChar)]);return current}function generateReviver(reviver){return function(key,value){var isString=typeof value==="string";if(isString&&value.charAt(0)===specialChar){return new $String(value.slice(1))}if(key==="")value=regenerate(value,value,{});if(isString)value=value.replace(safeStartWithSpecialCharRG,"$1"+specialChar).replace(escapedSafeSpecialChar,safeSpecialChar);return reviver?reviver.call(this,key,value):value}}function regenerateArray(root,current,retrieve){for(var i=0,length=current.length;i<length;i++){current[i]=regenerate(root,current[i],retrieve)}return current}function regenerateObject(root,current,retrieve){for(var key in current){if(current.hasOwnProperty(key)){current[key]=regenerate(root,current[key],retrieve)}}return current}function regenerate(root,current,retrieve){return current instanceof Array?regenerateArray(root,current,retrieve):current instanceof $String?current.length?retrieve.hasOwnProperty(current)?retrieve[current]:retrieve[current]=retrieveFromPath(root,current.split(specialChar)):root:current instanceof Object?regenerateObject(root,current,retrieve):current}var CircularJSON={stringify:function stringify(value,replacer,space,doNotResolve){return CircularJSON.parser.stringify(value,generateReplacer(value,replacer,!doNotResolve),space)},parse:function parse(text,reviver){return CircularJSON.parser.parse(text,generateReviver(reviver))},parser:JSON};return CircularJSON}(JSON,RegExp);
 
+
     /*! (C) Postdot Technologies, Inc (Apache-2.0) */
@@ -26,0 +27,0 @@ var arrayProtoSlice = Array.prototype.slice;

npm/test-system.js

@@ -6,4 +6,3 @@ #!/usr/bin/env node
 
-var fs = require('fs'),
-    recursive = require('recursive-readdir'),
+var recursive = require('recursive-readdir'),
     path = require('path'),
@@ -13,17 +12,6 @@
     async = require('async'),
-    _ = require('lodash'),
     Mocha = require('mocha'),
 
-    SPEC_SOURCE_DIR = path.join(__dirname, '..', 'test', 'system'),
+    SPEC_SOURCE_DIR = path.join(__dirname, '..', 'test', 'system');
 
-    /**
-     * Load a JSON from file synchronously
-     *
-     * @param {String} file
-     * @returns {String}
-     */
-    loadJSON = function (file) {
-        return JSON.parse(fs.readFileSync(path.join(__dirname, file)).toString());
-    };
-
 module.exports = function (exit) {
@@ -66,39 +54,2 @@ // banner line
             });
-        },
-
-        // execute nsp
-        // programmatically executing nsp is a bit tricky as we have to emulate the cli script's usage of internal
-        // nsp functions.
-        function (next) {
-            var nsp = require('nsp'),
-                pkg = loadJSON('../package.json'),
-                nsprc = loadJSON('../.nsprc');
-
-            console.log(chalk.yellow('processing nsp for security vulnerabilities...\n'));
-
-            // we do not pass full package for privacy concerns and also to add the ability to ignore exclude packages,
-            // hence we customise the package before we send it
-            nsp.check({
-                offline: false,
-                package: {
-                    name: pkg.name,
-                    dependencies: _.omit(pkg.dependencies, nsprc.exclusions || [])
-                }
-            }, function (err, result) {
-                // if processing nsp had an error, simply print that and exit
-                if (err) {
-                    console.error(chalk.red('There was an error processing NSP!\n') + chalk.gray(err.message || err) +
-                        '\n\nSince NSP server failure is not a blocker for tests, tests are not marked as failure!');
-                    return next();
-                }
-
-                // in case an nsp violation is found, we raise an error
-                if (result.length) {
-                    console.error(nsp.formatters.default(err, result));
-                    return next(1);
-                }
-
-                console.log(chalk.green('nsp ok!\n'));
-                return next();
-            });
         }
@@ -105,0 +56,0 @@ ], exit);

package.json

 {
   "name": "uvm",
-  "version": "1.7.3",
+  "version": "1.7.4",
   "description": "Universal Virtual Machine for Node and Browser",
@@ -28,23 +28,23 @@ "main": "index.js",
   "dependencies": {
-    "circular-json": "0.3.1",
+    "circular-json": "0.5.5",
     "inherits": "2.0.3",
-    "lodash": "4.17.10",
-    "uuid": "3.2.1"
+    "lodash": "4.17.11",
+    "uuid": "3.3.2"
   },
   "devDependencies": {
     "async": "2.6.1",
-    "browserify": "16.2.1",
+    "browserify": "16.2.2",
     "chalk": "2.4.1",
     "editorconfig": "0.15.0",
     "eslint": "4.19.1",
-    "eslint-plugin-jsdoc": "3.7.0",
-    "eslint-plugin-lodash": "2.7.0",
+    "eslint-plugin-jsdoc": "3.7.1",
+    "eslint-plugin-lodash": "3.1.0",
     "eslint-plugin-mocha": "4.12.0",
     "eslint-plugin-security": "1.4.0",
     "expect.js": "0.3.1",
-    "js-yaml": "3.11.0",
+    "js-yaml": "3.12.0",
     "jsdoc": "3.5.5",
     "jsdoc-to-markdown": "4.0.1",
-    "karma": "2.0.2",
-    "karma-browserify": "5.2.0",
+    "karma": "2.0.5",
+    "karma-browserify": "5.3.0",
     "karma-chrome-launcher": "2.2.0",
@@ -54,4 +54,3 @@ "karma-mocha": "1.3.0",
     "mocha": "5.2.0",
-    "nsp": "2.8.1",
-    "nyc": "11.8.0",
+    "nyc": "12.0.2",
     "packity": "0.3.2",
@@ -58,0 +57,0 @@ "parse-gitignore": "0.4.0",

README.md

@@ -14,3 +14,3 @@ # uvm
         bridge.send('pong', Date.now())
-    });'
+    });`
 }, function (err, bridge) {
@@ -17,0 +17,0 @@

test/system/locked-circularjson.test.js

@@ -5,5 +5,9 @@ var expect = require('expect.js');
 describe('circular-json dependency', function () {
+    // To update circular-json, the package needs to be updated and then post installing circular-json, one needs to
+    // manually copy node_modules/circular-json/build/circular-json.js.and replace it in where the previous
+    // circular-json code existed within lib/uvm/bridge-client.js. Finally, we should replace all backslash "\"
+    // characters with double backslash "\\".
     it('must be version locked, unless modified intentionally', function () {
-        expect(require('../../package.json').dependencies['circular-json']).be('0.3.1');
+        expect(require('../../package.json').dependencies['circular-json']).be('0.5.5');
     });
 });

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

25

decreased by-3.85%

Number of low supply chain risk alerts

8

decreased by-20%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

122833

decreased by-0.61%

Number of package files

41

decreased by-4.65%

Lines of code

1936

decreased by-3.05%

Dependency changes

• + Addedcircular-json@0.5.5(transitive)

• + Addedlodash@4.17.11(transitive)

• + Addeduuid@3.3.2(transitive)

• - Removedcircular-json@0.3.1(transitive)

• - Removedlodash@4.17.10(transitive)

• - Removeduuid@3.2.1(transitive)

• Updatedcircular-json@0.5.5

• Updatedlodash@4.17.11

• Updateduuid@3.3.2