vue - npm Package Compare versions

Comparing version 0.12.1-csp.1 to 0.12.1-csp.2

package.json

 {
   "name": "vue",
-  "version": "0.12.1-csp.1",
+  "version": "0.12.1-csp.2",
   "author": "Evan You <[e-mail]>",
@@ -25,6 +25,6 @@ "license": "MIT",
     "casperjs": "^1.1.0-beta3",
+    "codecov.io": "^0.1.2",
     "grunt": "^0.4.5",
     "grunt-contrib-jshint": "^0.10.0",
     "grunt-karma": "^0.8.3",
-    "grunt-karma-coveralls": "^2.5.3",
     "jshint-stylish": "^0.3.0",
@@ -31,0 +31,0 @@ "karma": "^0.12.31",

README.md

@@ -9,3 +9,3 @@ # CSP compliant build
 
-# Vue.js [![Build Status](https://travis-ci.org/yyx990803/vue.svg?branch=master)](https://travis-ci.org/yyx990803/vue) [![Selenium Test Status](https://saucelabs.com/buildstatus/vuejs)](https://saucelabs.com/u/vuejs) [![Coverage Status](https://img.shields.io/coveralls/yyx990803/vue.svg)](https://coveralls.io/r/yyx990803/vue?branch=master)
+# Vue.js [![Build Status](https://img.shields.io/circleci/project/yyx990803/vue/master.svg)](https://circleci.com/gh/yyx990803/vue) [![Coverage Status](https://img.shields.io/codecov/c/github/yyx990803/vue/master.svg)](https://codecov.io/github/yyx990803/vue?branch=master) [![Selenium Test Status](https://saucelabs.com/buildstatus/vuejs)](https://saucelabs.com/u/vuejs)
 
@@ -12,0 +12,0 @@ ## Intro

src/compiler/content.js

@@ -103,6 +103,6 @@ var _ = require('../util')
     // where the outlet is inside a conditional block
-    if (main && !node.selected) {
+    if (main && !node.__v_selected) {
       frag.appendChild(node.cloneNode(true))
     } else if (!main && node.parentNode === parent) {
-      node.selected = true
+      node.__v_selected = true
       frag.appendChild(node.cloneNode(true))
@@ -109,0 +109,0 @@ }

src/compiler/transclude.js

@@ -70,5 +70,6 @@ var _ = require('../util')
         replacer.nodeType !== 1 ||
-        // when root node has v-repeat, the instance ends up
-        // having multiple top-level nodes, thus becoming a
-        // block instance. (#835)
+        // when root node is <content> or has v-repeat, the
+        // instance could end up having multiple top-level
+        // nodes, thus becoming a block instance.
+        replacer.tagName.toLowerCase() === 'content' ||
         replacer.hasAttribute(config.prefix + 'repeat')
@@ -75,0 +76,0 @@ ) {

src/util/lang.js

@@ -175,3 +175,3 @@ /**
 exports.isObject = function (obj) {
-  return obj && typeof obj === 'object'
+  return obj !== null && typeof obj === 'object'
 }
@@ -199,5 +199,3 @@
 
-exports.isArray = function (obj) {
-  return Array.isArray(obj)
-}
+exports.isArray = Array.isArray
 
@@ -204,0 +202,0 @@ /**

src/util/misc.js

@@ -83,4 +83,4 @@ var _ = require('./index')
 
-var commonTagRE = /^(div|p|span|img|a|br|ul|ol|li|h1|h2|h3|h4|h5|code|pre)$/
-var tableElementsRE = /^caption|colgroup|thead|tfoot|tbody|tr|td|th$/
+exports.commonTagRE = /^(div|p|span|img|a|br|ul|ol|li|h1|h2|h3|h4|h5|code|pre)$/
+exports.tableElementsRE = /^caption|colgroup|thead|tfoot|tbody|tr|td|th$/
 
@@ -95,3 +95,3 @@ exports.checkComponent = function (el, options) {
   } else if (
-    !commonTagRE.test(tag) &&
+    !exports.commonTagRE.test(tag) &&
     _.resolveAsset(options, 'components', tag)
@@ -101,3 +101,3 @@ ) {
   } else if (
-    tableElementsRE.test(tag) &&
+    exports.tableElementsRE.test(tag) &&
     (tag = _.attr(el, 'component'))
@@ -104,0 +104,0 @@ ) {

src/util/options.js

@@ -217,2 +217,8 @@ var _ = require('./index')
     for (var key in components) {
+      if (_.commonTagRE.test(key)) {
+        _.warn(
+          'Do not use built-in HTML elements as component ' +
+          'name: ' + key
+        )
+      }
       def = components[key]
@@ -279,2 +285,2 @@ if (_.isPlainObject(def)) {
   return asset
-}
+}

src/watcher.js

@@ -182,3 +182,3 @@ var _ = require('./util')
       value !== this.value ||
-      Array.isArray(value) ||
+      _.isArray(value) ||
       this.deep
@@ -185,0 +185,0 @@ ) {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Number of low supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

1131229

decreased by-0.75%

Number of package files

71

decreased by-10.13%

Lines of code

24747

decreased by-1.38%

No dependency changes