webdetta - npm Package Compare versions

Comparing version 0.0.127 to 0.0.128

package.json

 {
   "name": "webdetta",
-  "version": "0.0.127",
+  "version": "0.0.128",
   "author": "Fedot Kriutchenko <[e-mail]>",
@@ -5,0 +5,0 @@ "description": "",

packages/sdk/defs.js

@@ -58,6 +58,5 @@ import { parseFn } from './common.js';
       get: new Function(vars + init + `return V[H];`),
-      set: new Function('value', (
-        (vars + `V[H] = value;`) +
-        (!allowWrite ? '' : `this["#internals"].rpc.cast(H, value);`)
-      )),
+      set: !allowWrite ? null : new Function('value', (
+        vars + `this["#internals"].rpc.cast(H, V[H] = value);`
+      ))
     }
@@ -64,0 +63,0 @@ };

New alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

106751

decreased by-0.02%

Lines of code

3133

decreased by-0.03%

No dependency changes