zoid - npm Package Compare versions

Comparing version 6.0.80 to 6.0.82

dist/module/component/component/validate.js

@@ -43,3 +43,3 @@ var _typeof = typeof Symbol === "function" && typeof Symbol.iterator === "symbol" ? function (obj) { return typeof obj; } : function (obj) { return obj && typeof Symbol === "function" && obj.constructor === Symbol && obj !== Symbol.prototype ? "symbol" : typeof obj; };
     if (!options) {
-        throw new Error('Expecred options to be passed');
+        throw new Error('Expected options to be passed');
     }
@@ -46,0 +46,0 @@

dist/module/drivers/script.js

@@ -26,17 +26,5 @@
 
-            component.log('instantiate_script_component');
+            component.log('instantiate_script_component_error');
 
-            var props = element.innerText ? eval('(' + element.innerText + ')') // eslint-disable-line no-eval, security/detect-eval-with-expression
-            : {};
-
-            var container = document.createElement('div');
-
-            if (!element.parentNode) {
-                throw new Error('Element has no parent');
-            }
-
-            element.parentNode.replaceChild(container, element);
-
-            // $FlowFixMe
-            component.render(props, container);
+            throw new Error('\n               \'x-component\' script type is no longer supported.  \n               Please migrate to another integration pattern.\n            ');
         }
@@ -43,0 +31,0 @@

index.js

@@ -7,3 +7,3 @@ /* @flow */
     // $FlowFixMe
-    module.exports = require('./dist/zoid.frame');
+    module.exports = require('./dist/zoid.frame'); // eslint-disable-line import/extensions,eslint-comments/no-unused-disable
     module.exports.default = module.exports;
@@ -10,0 +10,0 @@ } else {

package.json

 {
   "name": "zoid",
-  "version": "6.0.80",
+  "version": "6.0.82",
   "description": "Cross domain components.",
@@ -58,3 +58,3 @@ "main": "index.js",
     "beaver-logger": "^3.0.17",
-    "belter": "^1.0.77",
+    "belter": "1.0.123",
     "cross-domain-safe-weakmap": "^1.0.22",
@@ -61,0 +61,0 @@ "cross-domain-utils": "^2.0.16",

src/component/component/validate.js

@@ -43,3 +43,3 @@ /* @flow */
     if (!options) {
-        throw new Error(`Expecred options to be passed`);
+        throw new Error(`Expected options to be passed`);
     }
@@ -46,0 +46,0 @@

src/drivers/script.js

@@ -30,18 +30,9 @@ /* @flow */
 
-            component.log(`instantiate_script_component`);
+            component.log(`instantiate_script_component_error`);
 
-            let props : { [string] : mixed } = element.innerText
-                ? eval(`(${ element.innerText })`) // eslint-disable-line no-eval, security/detect-eval-with-expression
-                : {};
-
-            let container = document.createElement('div');
-
-            if (!element.parentNode) {
-                throw new Error(`Element has no parent`);
-            }
-
-            element.parentNode.replaceChild(container, element);
-
-            // $FlowFixMe
-            component.render(props, container);
+            throw new Error(`
+               'x-component' script type is no longer supported.  
+               Please migrate to another integration pattern.
+            `);
+      
         }
@@ -48,0 +39,0 @@

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Uses eval

Supply chain risk

Package uses eval() which is a dangerous function. This prevents the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

4101335

increased by0.34%

Lines of code

26434

increased by0.24%

Worsened metrics

Number of low supply chain risk alerts

3

increased by50%

Dependency changes

• + Addedbelter@1.0.123(transitive)

• - Removedbelter@1.0.190(transitive)

• Updatedbelter@1.0.123