@digipair/skill-editor 0.136.0 → 0.136.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.esm.js CHANGED
@@ -23,9 +23,9 @@ lodash.exports;
23
23
  }
24
24
  (function() {
25
25
  /** Used as a safe reference for `undefined` in pre-ES5 environments. */ var undefined$1;
26
- /** Used as the semantic version number. */ var VERSION = '4.17.21';
26
+ /** Used as the semantic version number. */ var VERSION = '4.18.1';
27
27
  /** Used as the size to enable large array optimizations. */ var LARGE_ARRAY_SIZE = 200;
28
- /** Error message constants. */ var CORE_ERROR_TEXT = 'Unsupported core-js use. Try https://npms.io/search?q=ponyfill.', FUNC_ERROR_TEXT = 'Expected a function', INVALID_TEMPL_VAR_ERROR_TEXT = 'Invalid `variable` option passed into `_.template`';
28
+ /** Error message constants. */ var CORE_ERROR_TEXT = 'Unsupported core-js use. Try https://npms.io/search?q=ponyfill.', FUNC_ERROR_TEXT = 'Expected a function', INVALID_TEMPL_VAR_ERROR_TEXT = 'Invalid `variable` option passed into `_.template`', INVALID_TEMPL_IMPORTS_ERROR_TEXT = 'Invalid `imports` option passed into `_.template`';
29
29
  /** Used to stand-in for `undefined` hash values. */ var HASH_UNDEFINED = '__lodash_hash_undefined__';
30
30
  /** Used as the maximum memoize cache size. */ var MAX_MEMOIZE_SIZE = 500;
31
31
  /** Used as the internal argument placeholder. */ var PLACEHOLDER = '__lodash_placeholder__';
@@ -1446,6 +1446,10 @@ lodash.exports;
1446
1446
  * embedded Ruby (ERB) as well as ES2015 template strings. Change the
1447
1447
  * following template settings to use alternative delimiters.
1448
1448
  *
1449
+ * **Security:** See
1450
+ * [threat model](https://github.com/lodash/lodash/blob/main/threat-model.md)
1451
+ * — `_.template` is insecure and will be removed in v5.
1452
+ *
1449
1453
  * @static
1450
1454
  * @memberOf _
1451
1455
  * @type {Object}
@@ -1880,7 +1884,7 @@ lodash.exports;
1880
1884
  * @name has
1881
1885
  * @memberOf SetCache
1882
1886
  * @param {*} value The value to search for.
1883
- * @returns {number} Returns `true` if `value` is found, else `false`.
1887
+ * @returns {boolean} Returns `true` if `value` is found, else `false`.
1884
1888
  */ function setCacheHas(value) {
1885
1889
  return this.__data__.has(value);
1886
1890
  }
@@ -3558,8 +3562,27 @@ lodash.exports;
3558
3562
  * @returns {boolean} Returns `true` if the property is deleted, else `false`.
3559
3563
  */ function baseUnset(object, path) {
3560
3564
  path = castPath(path, object);
3561
- object = parent(object, path);
3562
- return object == null || delete object[toKey(last(path))];
3565
+ // Prevent prototype pollution:
3566
+ // https://github.com/lodash/lodash/security/advisories/GHSA-xxjr-mmjv-4gpg
3567
+ // https://github.com/lodash/lodash/security/advisories/GHSA-f23m-r3pf-42rh
3568
+ var index = -1, length = path.length;
3569
+ if (!length) {
3570
+ return true;
3571
+ }
3572
+ while(++index < length){
3573
+ var key = toKey(path[index]);
3574
+ // Always block "__proto__" anywhere in the path if it's not expected
3575
+ if (key === '__proto__' && !hasOwnProperty.call(object, '__proto__')) {
3576
+ return false;
3577
+ }
3578
+ // Block constructor/prototype as non-terminal traversal keys to prevent
3579
+ // escaping the object graph into built-in constructors and prototypes.
3580
+ if ((key === 'constructor' || key === 'prototype') && index < length - 1) {
3581
+ return false;
3582
+ }
3583
+ }
3584
+ var obj = parent(object, path);
3585
+ return obj == null || delete obj[toKey(last(path))];
3563
3586
  }
3564
3587
  /**
3565
3588
  * The base implementation of `_.update`.
@@ -5656,7 +5679,7 @@ lodash.exports;
5656
5679
  }
5657
5680
  /**
5658
5681
  * Creates an array with all falsey values removed. The values `false`, `null`,
5659
- * `0`, `""`, `undefined`, and `NaN` are falsey.
5682
+ * `0`, `-0`, `0n`, `""`, `undefined`, and `NaN` are falsy.
5660
5683
  *
5661
5684
  * @static
5662
5685
  * @memberOf _
@@ -6144,7 +6167,7 @@ lodash.exports;
6144
6167
  var index = -1, length = pairs == null ? 0 : pairs.length, _$result = {};
6145
6168
  while(++index < length){
6146
6169
  var pair = pairs[index];
6147
- _$result[pair[0]] = pair[1];
6170
+ baseAssignValue(_$result, pair[0], pair[1]);
6148
6171
  }
6149
6172
  return _$result;
6150
6173
  }
@@ -12261,6 +12284,8 @@ lodash.exports;
12261
12284
  * **Note:** JavaScript follows the IEEE-754 standard for resolving
12262
12285
  * floating-point values which can produce unexpected results.
12263
12286
  *
12287
+ * **Note:** If `lower` is greater than `upper`, the values are swapped.
12288
+ *
12264
12289
  * @static
12265
12290
  * @memberOf _
12266
12291
  * @since 0.7.0
@@ -12274,9 +12299,16 @@ lodash.exports;
12274
12299
  * _.random(0, 5);
12275
12300
  * // => an integer between 0 and 5
12276
12301
  *
12302
+ * // when lower is greater than upper the values are swapped
12303
+ * _.random(5, 0);
12304
+ * // => an integer between 0 and 5
12305
+ *
12277
12306
  * _.random(5);
12278
12307
  * // => also an integer between 0 and 5
12279
12308
  *
12309
+ * _.random(-5);
12310
+ * // => an integer between -5 and 0
12311
+ *
12280
12312
  * _.random(5, true);
12281
12313
  * // => a floating-point number between 0 and 5
12282
12314
  *
@@ -12807,6 +12839,10 @@ lodash.exports;
12807
12839
  * properties may be accessed as free variables in the template. If a setting
12808
12840
  * object is given, it takes precedence over `_.templateSettings` values.
12809
12841
  *
12842
+ * **Security:** `_.template` is insecure and should not be used. It will be
12843
+ * removed in Lodash v5. Avoid untrusted input. See
12844
+ * [threat model](https://github.com/lodash/lodash/blob/main/threat-model.md).
12845
+ *
12810
12846
  * **Note:** In the development build `_.template` utilizes
12811
12847
  * [sourceURLs](http://www.html5rocks.com/en/tutorials/developertools/sourcemaps/#toc-sourceurl)
12812
12848
  * for easier debugging.
@@ -12912,8 +12948,13 @@ lodash.exports;
12912
12948
  options = undefined$1;
12913
12949
  }
12914
12950
  string = toString(string);
12915
- options = assignInWith({}, options, settings, customDefaultsAssignIn);
12916
- var imports = assignInWith({}, options.imports, settings.imports, customDefaultsAssignIn), importsKeys = keys(imports), importsValues = baseValues(imports, importsKeys);
12951
+ options = assignWith({}, options, settings, customDefaultsAssignIn);
12952
+ var imports = assignWith({}, options.imports, settings.imports, customDefaultsAssignIn), importsKeys = keys(imports), importsValues = baseValues(imports, importsKeys);
12953
+ arrayEach(importsKeys, function(key) {
12954
+ if (reForbiddenIdentifierChars.test(key)) {
12955
+ throw new Error(INVALID_TEMPL_IMPORTS_ERROR_TEXT);
12956
+ }
12957
+ });
12917
12958
  var isEscaping, isEvaluating, index = 0, interpolate = options.interpolate || reNoMatch, source = "__p += '";
12918
12959
  // Compile the regexp to match each delimiter.
12919
12960
  var reDelimiters = _$RegExp((options.escape || reNoMatch).source + '|' + interpolate.source + '|' + (interpolate === reInterpolate ? reEsTemplate : reNoMatch).source + '|' + (options.evaluate || reNoMatch).source + '|$', 'g');
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@digipair/skill-editor",
3
- "version": "0.136.0",
3
+ "version": "0.136.3",
4
4
  "main": "./dist/index.cjs.js",
5
5
  "module": "./dist/index.esm.js",
6
6
  "types": "./dist/index.d.ts",
@@ -1,2 +0,0 @@
1
- export * from './lib/skill-editor';
2
- //# sourceMappingURL=index.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC"}
@@ -1,16 +0,0 @@
1
- import { PinsSettings } from '@digipair/engine';
2
- export declare const setReasoning: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<{}>;
3
- export declare const reasonings: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<string[]>;
4
- export declare const reasoning: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<any>;
5
- export declare const removeReasoning: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<{}>;
6
- export declare const setDigipair: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<{}>;
7
- export declare const digipairs: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<string[]>;
8
- export declare const digipair: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<any>;
9
- export declare const removeDigipair: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<{}>;
10
- export declare const addDigipair: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<{}>;
11
- export declare const metadata: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<any>;
12
- export declare const setAvatar: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<{}>;
13
- export declare const templates: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<string[]>;
14
- export declare const schemas: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<any[]>;
15
- export declare const tools: (params: any, pinsSettingsList: PinsSettings[], context: any) => Promise<any[]>;
16
- //# sourceMappingURL=skill-editor.d.ts.map
@@ -1 +0,0 @@
1
- {"version":3,"file":"skill-editor.d.ts","sourceRoot":"","sources":["../../../src/lib/skill-editor.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AAwShD,eAAO,MAAM,YAAY,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,gBACnB,CAAC;AAEtE,eAAO,MAAM,UAAU,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,sBACnB,CAAC;AAEpE,eAAO,MAAM,SAAS,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,iBACnB,CAAC;AAEnE,eAAO,MAAM,eAAe,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,gBACnB,CAAC;AAEzE,eAAO,MAAM,WAAW,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,gBACnB,CAAC;AAErE,eAAO,MAAM,SAAS,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,sBACnB,CAAC;AAEnE,eAAO,MAAM,QAAQ,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,iBACnB,CAAC;AAElE,eAAO,MAAM,cAAc,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,gBACnB,CAAC;AAExE,eAAO,MAAM,WAAW,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,gBACnB,CAAC;AAErE,eAAO,MAAM,QAAQ,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,iBACnB,CAAC;AAElE,eAAO,MAAM,SAAS,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,gBACnB,CAAC;AAEnE,eAAO,MAAM,SAAS,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,sBACnB,CAAC;AAEnE,eAAO,MAAM,OAAO,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,mBACnB,CAAC;AAEjE,eAAO,MAAM,KAAK,GAAI,QAAQ,GAAG,EAAE,kBAAkB,YAAY,EAAE,EAAE,SAAS,GAAG,mBACnB,CAAC"}