Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

@pnpm/cafs

Package Overview
Dependencies
Maintainers
3
Versions
74
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@pnpm/cafs - npm Package Compare versions

Comparing version 2.0.2 to 2.0.3

6

CHANGELOG.md
# @pnpm/cafs
## 2.0.3
### Patch Changes
- b3059f4f8: Don't unpack file duplicates to the content-addressable store.
## 2.0.2

@@ -4,0 +10,0 @@

11

lib/addFilesFromTarball.js

@@ -11,5 +11,10 @@ "use strict";

await new Promise((resolve, reject) => {
extract.on('entry', async (header, fileStream, next) => {
const filename = header.name.substr(header.name.indexOf('/') + 1);
if (header.type !== 'file' || ignore(filename)) {
extract.on('entry', (header, fileStream, next) => {
// There are some edge cases, where the same files are extracted multiple times.
// So there will be an entry for "lib/index.js" and another one for "lib//index.js",
// which are the same file.
// Hence, we are normalizing the file name, replacing // with / and checking for duplicates.
// Example of such package: @pnpm/colorize-semver-diff@1.0.1
const filename = header.name.substr(header.name.indexOf('/') + 1).replace(/\/\//g, '/');
if (header.type !== 'file' || ignore(filename) || filesIndex[filename]) {
fileStream.resume();

@@ -16,0 +21,0 @@ next();

{
"name": "@pnpm/cafs",
"version": "2.0.2",
"version": "2.0.3",
"description": "A content-addressable filesystem for the packages storage",

@@ -5,0 +5,0 @@ "main": "lib/index.js",

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc