zoid - npm Package Compare versions

Comparing version 6.0.69 to 6.0.70-patch1

dist/module/component/parent/drivers.js

@@ -171,2 +171,3 @@ var _extends = Object.assign || function (target) { for (var i = 1; i < arguments.length; i++) { var source = arguments[i]; for (var key in source) { if (Object.prototype.hasOwnProperty.call(source, key)) { target[key] = source[key]; } } } return target; };
         if (width) {
+            this.container.style.width = toCSS(width);
             this.element.style.width = toCSS(width);
@@ -176,2 +177,3 @@ }
         if (height) {
+            this.container.style.height = toCSS(height);
             this.element.style.height = toCSS(height);
@@ -178,0 +180,0 @@ }

package.json

 {
   "name": "zoid",
-  "version": "6.0.69",
+  "version": "6.0.70-patch1",
   "description": "Cross domain components.",
@@ -52,15 +52,15 @@ "main": "index.js",
     "flow-bin": "^0.76",
-    "grumbler-scripts": "^2.0.19",
     "mocha": "^4",
-    "serve": "^6.5.6"
+    "serve": "^6.5.6",
+    "grumbler-scripts": "^2.0.77"
   },
   "dependencies": {
     "beaver-logger": "^3.0.17",
-    "belter": "^1.0.77",
+    "belter": "1.0.81",
     "cross-domain-safe-weakmap": "^1.0.22",
-    "cross-domain-utils": "^2.0.16",
+    "cross-domain-utils": "2.0.16",
     "hi-base32": "^0.5.0",
-    "post-robot": "^8.0.29",
-    "zalgo-promise": "^1.0.34"
+    "post-robot": "8.0.30",
+    "zalgo-promise": "1.0.34"
   }
 }

src/component/component/validate.js

@@ -43,3 +43,3 @@ /* @flow */
     if (!options) {
-        throw new Error(`Expecred options to be passed`);
+        throw new Error(`Expected options to be passed`);
     }
@@ -46,0 +46,0 @@

src/component/parent/drivers.js

@@ -200,2 +200,3 @@ /* @flow */
         if (width) {
+            this.container.style.width = toCSS(width);
             this.element.style.width   = toCSS(width);
@@ -205,2 +206,3 @@ }
         if (height) {
+            this.container.style.height = toCSS(height);
             this.element.style.height = toCSS(height);
@@ -207,0 +209,0 @@ }

src/drivers/script.js

@@ -30,18 +30,9 @@ /* @flow */
 
-            component.log(`instantiate_script_component`);
+            component.log(`instantiate_script_component_error`);
 
-            let props : { [string] : mixed } = element.innerText
-                ? eval(`(${ element.innerText })`) // eslint-disable-line no-eval, security/detect-eval-with-expression
-                : {};
-
-            let container = document.createElement('div');
-
-            if (!element.parentNode) {
-                throw new Error(`Element has no parent`);
-            }
-
-            element.parentNode.replaceChild(container, element);
-
-            // $FlowFixMe
-            component.render(props, container);
+            throw new Error(`
+               'x-component' script type is no longer supported.  
+               Please migrate to another integration pattern.
+            `);
+      
         }
@@ -48,0 +39,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

4130806

decreased by-0.13%

Lines of code

26279

decreased by-0.13%

Number of low quality alerts

2

increased by100%

Dependency changes

• + Addedbelter@1.0.81(transitive)

• + Addedcross-domain-utils@2.0.16(transitive)

• + Addedpost-robot@8.0.30(transitive)

• + Addedzalgo-promise@1.0.34(transitive)

• - Removedbelter@1.0.190(transitive)

• - Removedcross-domain-utils@2.0.38(transitive)

• - Removedpost-robot@8.0.32(transitive)

• - Removedzalgo-promise@1.0.48(transitive)

• Updatedbelter@1.0.81

• Updatedcross-domain-utils@2.0.16

• Updatedpost-robot@8.0.30

• Updatedzalgo-promise@1.0.34