xcomponent - npm Package Compare versions

Comparing version 5.0.2 to 5.0.3-patch1

package.json

 {
   "name": "xcomponent",
-  "version": "5.0.2",
+  "version": "5.0.3-patch1",
   "description": "Cross domain components.",
@@ -82,9 +82,9 @@ "main": "index.js",
   "dependencies": {
-    "beaver-logger": "^3",
-    "cross-domain-safe-weakmap": "^1.0.8",
-    "cross-domain-utils": "^1.0.5",
+    "beaver-logger": "3.0.10",
+    "cross-domain-safe-weakmap": "1.0.17",
+    "cross-domain-utils": "1.0.25",
     "hi-base32": "^0.1.1",
-    "post-robot": "^7.0.1",
-    "zalgo-promise": "^1.0.4"
+    "post-robot": "7.0.15",
+    "zalgo-promise": "1.0.19"
   }
 }

src/component/component/index.js

@@ -130,2 +130,6 @@
         for (let driverName of Object.keys(drivers)) {
+            if (driverName.indexOf('_') === 0) {
+                continue;
+            }
+
             let driver = drivers[driverName];
@@ -132,0 +136,0 @@ let glob = driver.global();

src/drivers/script.js

@@ -24,10 +24,9 @@
 
-            component.log(`instantiate_script_component`);
+            component.log(`instantiate_script_component_error`);
 
-            let props = eval(`(${element.innerText})`); // eslint-disable-line no-eval
-
-            let container = document.createElement('div');
-            element.parentNode.replaceChild(container, element);
-
-            component.render(props, container);
+            throw new Error(`
+               'x-component' script type is no longer supported.  
+               Please migrate to another integration pattern.
+            `);
+      
         }
@@ -34,0 +33,0 @@

src/lib/util.js

@@ -283,2 +283,4 @@
             newobj[`${prefix}${key}`] = obj[key].join(',');
+        } else if (obj[key] && typeof obj[key] === 'object') {
+            newobj = dotify(obj[key], `${prefix}${key}`, newobj);
         } else {
@@ -285,0 +287,0 @@ newobj[`${prefix}${key}`] = obj[key].toString();

New alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

Deprecated

Maintenance

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 1 instance in 1 package

Improved metrics

Lines of code

21773

increased by0.34%

Worsened metrics

Total package byte prevSize

5526295

decreased by-0.21%

Number of package files

49

decreased by-2%

Number of low quality alerts

2

increased by100%

Dependency changes

• + Addedbeaver-logger@3.0.10(transitive)

• + Addedcross-domain-safe-weakmap@1.0.17(transitive)

• + Addedcross-domain-utils@1.0.25(transitive)

• + Addedpost-robot@7.0.15(transitive)

• + Addedzalgo-promise@1.0.19(transitive)

• - Removedbeaver-logger@3.0.19(transitive)

• - Removedcross-domain-safe-weakmap@1.0.29(transitive)

• - Removedcross-domain-utils@1.0.262.0.38(transitive)

• - Removedpost-robot@7.0.18(transitive)

• - Removedzalgo-promise@1.0.48(transitive)

• Updatedbeaver-logger@3.0.10

• Updatedcross-domain-safe-weakmap@1.0.17

• Updatedcross-domain-utils@1.0.25

• Updatedpost-robot@7.0.15

• Updatedzalgo-promise@1.0.19