@flowfuse/nr-project-nodes - npm Package Compare versions

Comparing version 0.6.5-5b6b1db-202406041411.0 to 0.6.5-8fb4a4d-202406141120.0

nodes/project-link.js

@@ -11,5 +11,6 @@ module.exports = function (RED) {
     const crypto = require('crypto')
-    const got = require('got')
+    const { default: GOT } = require('got')
     const MQTT = require('mqtt')
     const urlModule = require('url')
+    const utils = require('../lib/utils.js')
 
@@ -635,2 +636,10 @@ // Constants
                     parsedURL.hostname = newURL.hostname
+
+                    // wsOptions.agent is expected to be an HTTP or HTTPS agent based on the request protocol
+                    if (process.env.all_proxy || process.env.http_proxy || process.env.https_proxy) {
+                        options.wsOptions = {
+                            agent: utils.getWSProxyAgent(brokerURL)
+                        }
+                    }
+
                     client = MQTT.connect(parsedURL, options)
@@ -1061,2 +1070,6 @@ clients.push(client) // add to clients array for containment and auto cleanup of multiple clients
 
+    const got = GOT.extend({
+        agent: utils.getHTTPProxyAgent(RED.settings.flowforge.forgeURL, { timeout: 4000 })
+    })
+
     // Endpoint for querying list of projects in node UI
@@ -1063,0 +1076,0 @@ RED.httpAdmin.get('/nr-project-link/projects', RED.auth.needsPermission('flows.write'), async function (_req, res) {

package.json

 {
     "name": "@flowfuse/nr-project-nodes",
-    "version": "0.6.5-5b6b1db-202406041411.0",
+    "version": "0.6.5-8fb4a4d-202406141120.0",
     "description": "A collection of Node-RED nodes for easy communication between Node-RED instances running in the FlowFuse platform",
     "scripts": {
-        "test": "echo \"Error: no test specified\" && exit 1",
-        "lint": "eslint -c .eslintrc --ext js,html nodes/**/*.js",
-        "lint:fix": "eslint -c .eslintrc --ext js,html nodes/**/*.js --fix"
+        "test": "mocha test/unit/**/*_spec.js --timeout 5000",
+        "lint": "eslint -c .eslintrc --ext js,html nodes/**/*.js  lib/**/*.js test/**/*.js",
+        "lint:fix": "eslint -c .eslintrc --ext js,html nodes/**/*.js  lib/**/*.js test/**/*.js --fix"
     },
@@ -23,3 +23,9 @@ "repository": {
         "eslint-config-standard": "^17.0.0",
-        "eslint-plugin-html": "7.1.0"
+        "eslint-plugin-html": "7.1.0",
+        "eslint-plugin-no-only-tests": "^3.1.0",
+        "mocha": "^10.4.0",
+        "mocha-cli": "^1.0.1",
+        "node-red": "^3.1.9",
+        "node-red-node-test-helper": "^0.3.4",
+        "sinon": "^18.0.0"
     },
@@ -39,4 +45,7 @@ "keywords": [
         "got": "^11.8.6",
-        "mqtt": "^4.3.7"
+        "http-proxy-agent": "^7.0.2",
+        "https-proxy-agent": "^7.0.4",
+        "mqtt": "^4.3.7",
+        "proxy-from-env": "^1.1.0"
     }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

122894

increased by33.83%

Number of package files

15

increased by15.38%

Lines of code

1577

increased by52.51%

Number of low quality alerts

1

decreased by-50%

Worsened metrics

Dependency count

5

increased by150%

Dev dependency count

9

increased by200%

Number of low supply chain risk alerts

76

increased by660%

Number of medium supply chain risk alerts

11

increased by1000%

Dependency changes

• + Addedhttp-proxy-agent@^7.0.2

• + Addedhttps-proxy-agent@^7.0.4

• + Addedproxy-from-env@^1.1.0

• + Addedagent-base@7.1.3(transitive)

• + Addedhttp-proxy-agent@7.0.2(transitive)

• + Addedhttps-proxy-agent@7.0.6(transitive)

• + Addedproxy-from-env@1.1.0(transitive)