Comparing lodash@4.17.20...lodash@4.17.21 • npm-diff.app 📦🔃

@@ -13,7 +13,7 @@
13	var undefined;	13	var undefined;
14		14
15	/** Used as the semantic version number. */	15	/** Used as the semantic version number. */
16	var VERSION = '4.17.20';	16	var VERSION = '4.17.21';
17		17
18	/** Error message constants. */	18	/** Error message constants. */
19	var FUNC_ERROR_TEXT = 'Expected a function';	19	var FUNC_ERROR_TEXT = 'Expected a function';

   var undefined;
   /** Used as the semantic version number. */
+  var VERSION = '4.17.21';
   /** Used as the size to enable large array optimizations. */
   var LARGE_ARRAY_SIZE = 200;
   /** Error message constants. */
   var CORE_ERROR_TEXT = 'Unsupported core-js use. Try https://npms.io/search?q=ponyfill.',
+      FUNC_ERROR_TEXT = 'Expected a function',
+      INVALID_TEMPL_VAR_ERROR_TEXT = 'Invalid `variable` option passed into `_.template`';
   /** Used to stand-in for `undefined` hash values. */
   var HASH_UNDEFINED = '__lodash_hash_undefined__';
   var reRegExpChar = /[\\^$.*+?()[\]{}|]/g,
       reHasRegExpChar = RegExp(reRegExpChar.source);
+  /** Used to match leading and trailing whitespace. */
+  var reTrim = /^\s+|\s+$/g,
+      reTrimStart = /^\s+/,
+  /** Used to match leading whitespace. */
+  var reTrimStart = /^\s+/;
+  /** Used to match a single whitespace character. */
+  var reWhitespace = /\s/;
   /** Used to match wrap detail comments. */
   var reWrapComment = /\{(?:\n\/\* \[wrapped with .+\] \*\/)?\n?/,
       reWrapDetails = /\{\n\/\* \[wrapped with (.+)\] \*/,
   /** Used to match words composed of alphanumeric characters. */
   var reAsciiWord = /[^\x00-\x2f\x3a-\x40\x5b-\x60\x7b-\x7f]+/g;
+  /**
+   * Used to validate the `validate` option in `_.template` variable.
+   *
+   * Forbids characters which could potentially change the meaning of the function argument definition:
+   * - "()," (modification of function parameters)
+   * - "=" (default value)
+   * - "[]{}" (destructuring of function parameters)
+   * - "/" (beginning of a comment)
+   * - whitespace
+   */
+  var reForbiddenIdentifierChars = /[()=,{}\[\]\/\s]/;
   /** Used to match backslashes in property paths. */
   var reEscapeChar = /\\(\\)?/g;
+  }
   /**
+   * The base implementation of `_.trim`.
+   *
+   * @private
+   * @param {string} string The string to trim.
+   * @returns {string} Returns the trimmed string.
+   */
+  function baseTrim(string) {
+    return string
+      ? string.slice(0, trimmedEndIndex(string) + 1).replace(reTrimStart, '')
+      : string;
+  }
+  /**
    * The base implementation of `_.unary` without support for storing metadata.
+   *
    * @private
+  }
   /**
+   * Used by `_.trim` and `_.trimEnd` to get the index of the last non-whitespace
+   * character of `string`.
+   *
+   * @private
+   * @param {string} string The string to inspect.
+   * @returns {number} Returns the index of the last non-whitespace character.
+   */
+  function trimmedEndIndex(string) {
+    var index = string.length;
+    while (index-- && reWhitespace.test(string.charAt(index))) {}
+    return index;
+  }
+  /**
    * Used by `_.unescape` to convert HTML entities to characters.
+   *
    * @private
       if (typeof value != 'string') {
         return value === 0 ? value : +value;
+      }
+      value = baseTrim(value);
       var isBinary = reIsBinary.test(value);
       return (isBinary || reIsOctal.test(value))
         ? freeParseInt(value.slice(2), isBinary ? 2 : 8)
       if (!variable) {
         source = 'with (obj) {\n' + source + '\n}\n';
+      }
+      // Throw an error if a forbidden character was found in `variable`, to prevent
+      // potential command injection attacks.
+      else if (reForbiddenIdentifierChars.test(variable)) {
+        throw new Error(INVALID_TEMPL_VAR_ERROR_TEXT);
+      }
       // Cleanup code by stripping empty strings.
       source = (isEvaluating ? source.replace(reEmptyStringLeading, '') : source)
         .replace(reEmptyStringMiddle, '$1')
     function trim(string, chars, guard) {
       string = toString(string);
       if (string && (guard || chars === undefined)) {
+        return baseTrim(string);
+      }
       if (!string || !(chars = baseToString(chars))) {
         return string;
     function trimEnd(string, chars, guard) {
       string = toString(string);
       if (string && (guard || chars === undefined)) {
+        return string.slice(0, trimmedEndIndex(string) + 1);
+      }
       if (!string || !(chars = baseToString(chars))) {
         return string;

@@ -1,7 +1,7 @@
1	var root = require('./_root'),	1	var root = require('./_root'),
2	toString = require('./toString');	2	toString = require('./toString');
3		3
4	/** Used to match leading and trailing whitespace. */	4	/** Used to match leading whitespace. */
5	var reTrimStart = /^\s+/;	5	var reTrimStart = /^\s+/;
6		6
7	/* Built-in method references for those with the same name as other `lodash` methods. */	7	/* Built-in method references for those with the same name as other `lodash` methods. */

     templateSettings = require('./templateSettings'),
     toString = require('./toString');
+/** Error message constants. */
+var INVALID_TEMPL_VAR_ERROR_TEXT = 'Invalid `variable` option passed into `_.template`';
 /** Used to match empty string literals in compiled template source. */
 var reEmptyStringLeading = /\b__p \+= '';/g,
     reEmptyStringMiddle = /\b(__p \+=) '' \+/g,
     reEmptyStringTrailing = /(__e\(.*?\)|\b__t\)) \+\n'';/g;
 /**
+ * Used to validate the `validate` option in `_.template` variable.
+ *
+ * Forbids characters which could potentially change the meaning of the function argument definition:
+ * - "()," (modification of function parameters)
+ * - "=" (default value)
+ * - "[]{}" (destructuring of function parameters)
+ * - "/" (beginning of a comment)
+ * - whitespace
+ */
+var reForbiddenIdentifierChars = /[()=,{}\[\]\/\s]/;
+/**
  * Used to match
  * [ES template delimiters](http://ecma-international.org/ecma-262/7.0/#sec-template-literal-lexical-components).
  */
   if (!variable) {
     source = 'with (obj) {\n' + source + '\n}\n';
+  }
+  // Throw an error if a forbidden character was found in `variable`, to prevent
+  // potential command injection attacks.
+  else if (reForbiddenIdentifierChars.test(variable)) {
+    throw new Error(INVALID_TEMPL_VAR_ERROR_TEXT);
+  }
   // Cleanup code by stripping empty strings.
   source = (isEvaluating ? source.replace(reEmptyStringLeading, '') : source)
     .replace(reEmptyStringMiddle, '$1')

-var isObject = require('./isObject'),
+var baseTrim = require('./_baseTrim'),
+    isObject = require('./isObject'),
     isSymbol = require('./isSymbol');
 /** Used as references for various `Number` constants. */
 var NAN = 0 / 0;
-/** Used to match leading and trailing whitespace. */
-var reTrim = /^\s+|\s+$/g;
 /** Used to detect bad signed hexadecimal string values. */
 var reIsBadHex = /^[-+]0x[0-9a-f]+$/i;
   if (typeof value != 'string') {
     return value === 0 ? value : +value;
   }
-  value = value.replace(reTrim, '');
+  value = baseTrim(value);
   var isBinary = reIsBinary.test(value);
   return (isBinary || reIsOctal.test(value))
     ? freeParseInt(value.slice(2), isBinary ? 2 : 8)

@@ -2,11 +2,9 @@
2	castSlice = require('./_castSlice'),	2	castSlice = require('./_castSlice'),
3	charsEndIndex = require('./_charsEndIndex'),	3	charsEndIndex = require('./_charsEndIndex'),
4	stringToArray = require('./_stringToArray'),	4	stringToArray = require('./_stringToArray'),
5	toString = require('./toString');	5	toString = require('./toString'),
		6	trimmedEndIndex = require('./_trimmedEndIndex');
6		7
7	/** Used to match leading and trailing whitespace. */
8	var reTrimEnd = /\s+$/;
9
10	/**	8	/**
11	* Removes trailing whitespace or specified characters from `string`.	9	* Removes trailing whitespace or specified characters from `string`.
12	*	10	*
@@ -29,7 +27,7 @@
29	function trimEnd(string, chars, guard) {	27	function trimEnd(string, chars, guard) {
30	string = toString(string);	28	string = toString(string);
31	if (string && (guard \|\| chars === undefined)) {	29	if (string && (guard \|\| chars === undefined)) {
32	return string.replace(reTrimEnd, '');	30	return string.slice(0, trimmedEndIndex(string) + 1);
33	}	31	}
34	if (!string \|\| !(chars = baseToString(chars))) {	32	if (!string \|\| !(chars = baseToString(chars))) {
35	return string;	33	return string;

@@ -4,7 +4,7 @@
4	stringToArray = require('./_stringToArray'),	4	stringToArray = require('./_stringToArray'),
5	toString = require('./toString');	5	toString = require('./toString');
6		6
7	/** Used to match leading and trailing whitespace. */	7	/** Used to match leading whitespace. */
8	var reTrimStart = /^\s+/;	8	var reTrimStart = /^\s+/;
9		9
10	/**	10	/**

@@ -1,6 +1,6 @@
1	{	1	{
2	"name": "lodash",	2	"name": "lodash",
3	"version": "4.17.20",	3	"version": "4.17.21",
4	"description": "Lodash modular utilities.",	4	"description": "Lodash modular utilities.",
5	"keywords": "modules, stdlib, util",	5	"keywords": "modules, stdlib, util",
6	"homepage": "https://lodash.com/",	6	"homepage": "https://lodash.com/",

@@ -1,4 +1,4 @@
1	# lodash v4.17.20	1	# lodash v4.17.21
2		2
3	The [Lodash](https://lodash.com/) library exported as [Node.js](https://nodejs.org/) modules.	3	The [Lodash](https://lodash.com/) library exported as [Node.js](https://nodejs.org/) modules.
4		4
@@ -28,7 +28,7 @@
28	var curryN = require('lodash/fp/curryN');	28	var curryN = require('lodash/fp/curryN');
29	```	29	```
30		30
31	See the [package source](https://github.com/lodash/lodash/tree/4.17.20-npm) for more details.	31	See the [package source](https://github.com/lodash/lodash/tree/4.17.21-npm) for more details.
32		32
33	Note:<br>	33	Note:<br>
34	Install [n_](https://www.npmjs.com/package/n_) for Lodash use in the Node.js < 6 REPL.	34	Install [n_](https://www.npmjs.com/package/n_) for Lodash use in the Node.js < 6 REPL.

+{
+  "nodes": {
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1613582597,
+        "narHash": "sha256-6LvipIvFuhyorHpUqK3HjySC5Y6gshXHFBhU9EJ4DoM=",
+        "path": "/nix/store/srvplqq673sqd9vyfhyc5w1p88y1gfm4-source",
+        "rev": "6b1057b452c55bb3b463f0d7055bc4ec3fd1f381",
+        "type": "path"
+      },
+      "original": {
+        "id": "nixpkgs",
+        "type": "indirect"
+      }
+    },
+    "root": {
+      "inputs": {
+        "nixpkgs": "nixpkgs",
+        "utils": "utils"
+      }
+    },
+    "utils": {
+      "locked": {
+        "lastModified": 1610051610,
+        "narHash": "sha256-U9rPz/usA1/Aohhk7Cmc2gBrEEKRzcW4nwPWMPwja4Y=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "3982c9903e93927c2164caa727cd3f6a0e6d14cc",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}

+npm run build
+npm run doc
+npm i
+git clone --depth=10 --branch=master git@github.com:lodash-archive/lodash-cli.git ./node_modules/lodash-cli
+mkdir -p ./node_modules/lodash-cli/node_modules/lodash; cd $_; cp ../../../../lodash.js ./lodash.js; cp ../../../../package.json ./package.json
+cd ../../; npm i --production; cd ../../
+node ./node_modules/lodash-cli/bin/lodash core exports=node -o ./npm-package/core.js
+node ./node_modules/lodash-cli/bin/lodash modularize exports=node -o ./npm-package
+cp lodash.js npm-package/lodash.js
+cp dist/lodash.min.js npm-package/lodash.min.js
+cp LICENSE npm-package/LICENSE
+. Clone two repos
+Bump lodash version in package.json, readme, package=locak, lodash.js
+npm run build
+npm run doc
+. update mappings in ldoash-cli
+. copy ldoash into lodash-cli node modules and package json.
+node ./node_modules/lodash-cli/bin/lodash core exports=node -o ./npm-package/core.js
+node ./node_modules/lodash-cli/bin/lodash modularize exports=node -o ./npm-package
+. Clone the two repositories:
+```sh
+$ git clone https://github.com/lodash/lodash.git
+$ git clone https://github.com/bnjmnt4n/lodash-cli.git
+```
+. Update lodash-cli to accomdate changes in lodash source. This can typically involve adding new function dependency mappings in lib/mappings.js. Sometimes, additional changes might be needed for more involved functions.
+. In the lodash repository, update references to the lodash version in README.md, lodash.js, package.jsona nd package-lock.json
+. Run:
+```sh
+npm run build
+npm run doc
+node ../lodash-cli/bin/lodash core -o ./dist/lodash.core.js
+```
+. Add a commit and tag the release
+mkdir ../lodash-temp
+cp lodash.js dist/lodash.min.js dist/lodash.core.js dist/lodash.core.min.js ../lodash-temp/
+node ../lodash-cli/bin/lodash modularize exports=node -o .
+cp ../lodash-temp/lodash.core.js core.js
+cp ../lodash-temp/lodash.core.min.js core.min.js
+cp ../lodash-temp/lodash.js lodash.js
+cp ../lodash-temp/lodash.min.js lodash.min.js
+❯ node ../lodash-cli/bin/lodash modularize exports=es -o .

+{
+  inputs = {
+    utils.url = "github:numtide/flake-utils";
+  };
+  outputs = { self, nixpkgs, utils }:
+    utils.lib.eachDefaultSystem (system:
+      let
+        pkgs = nixpkgs.legacyPackages."${system}";
+      in rec {
+       devShell = pkgs.mkShell {
+          nativeBuildInputs = with pkgs; [
+            yarn
+            nodejs-14_x
+            nodePackages.typescript-language-server
+            nodePackages.eslint
+          ];
+        };
+      });
+}

Comparinglodash@4.17.20

Comparinglodash@4.17.20

Source

npm diff

Options

Bundlephobia

Packagephobia

Packagephobia

core.js +++1---1

lodash.js +++57---9

parseInt.js +++1---1

template.js +++21---0

toNumber.js +++3---5

trim.js +++2---4

trimEnd.js +++3---5

trimStart.js +++1---1

package.json +++1---1

README.md +++2---2

_baseTrim.js +++19---0

_trimmedEndIndex.js +++19---0

flake.lock +++40---0

release.md +++48---0

flake.nix +++20---0

+++0---0

Packagephobia

Source

core.js +++1---1

lodash.js +++57---9

parseInt.js +++1---1

template.js +++21---0

toNumber.js +++3---5

trim.js +++2---4

trimEnd.js +++3---5

trimStart.js +++1---1

package.json +++1---1

README.md +++2---2

_baseTrim.js +++19---0

_trimmedEndIndex.js +++19---0

flake.lock +++40---0

release.md +++48---0

flake.nix +++20---0

Comparing
`lodash@4.17.20`

Comparing
`lodash@4.17.20`