@cloudant/cloudant - npm Package Compare versions

Comparing version 4.2.5-SNAPSHOT.3 to 4.2.5-SNAPSHOT.4

CHANGES.md

@@ -0,1 +1,5 @@
+# Unreleased
+- [FIXED] Stopped constant token auto renewal in the absence of a cookie
+  header Max-Age
+
 # 4.2.4 (2020-03-02)
@@ -2,0 +6,0 @@ - [FIXED] Pinned Nano to version 8.1 to resolve issue with extending upstream

lib/tokens/TokenManager.js

@@ -38,3 +38,3 @@ // Copyright © 2019 IBM Corp. All rights reserved.
       debug(`Renewing token in ${delayMSecs} milliseconds.`);
-      setTimeout(this._autoRenew.bind(this), delayMSecs).unref();
+      setTimeout(this._autoRenew.bind(this, defaultMaxAgeSecs), delayMSecs).unref();
     }).catch((error) => {
@@ -41,0 +41,0 @@ debug(`Failed to auto renew token - ${error}. Retrying in 60 seconds.`);

package.json

@@ -10,3 +10,3 @@ {
   },
-  "version": "4.2.5-SNAPSHOT.3",
+  "version": "4.2.5-SNAPSHOT.4",
   "author": {
@@ -13,0 +13,0 @@ "name": "IBM Cloudant",

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

130690

increased by0.09%

Worsened metrics

Number of medium supply chain risk alerts

3

increased by50%

No dependency changes