New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

@pnpm/git-resolver

Package Overview
Dependencies
Maintainers
2
Versions
140
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@pnpm/git-resolver - npm Package Compare versions

Comparing version 0.3.5 to 0.3.6

13

lib/index.js

@@ -11,7 +11,5 @@ "use strict";

Object.defineProperty(exports, "__esModule", { value: true });
const logger_1 = require("@pnpm/logger");
const git = require("graceful-git");
const semver = require("semver");
const parsePref_1 = require("./parsePref");
const gitLogger = logger_1.default; // TODO: add namespace 'git-logger'
function default_1(opts) {

@@ -30,12 +28,3 @@ return function resolveGit(wantedDependency) {

hosted.committish = commit;
let tarball;
if (hosted.type === 'github') {
// current hosted-git-info github tarball template points to old url which generates a 302 redirect to new url
// force new url for github
// TODO: remove this patch after https://github.com/npm/hosted-git-info/pull/34 is released
tarball = `https://codeload.github.com/${hosted.user}/${hosted.project}/tar.gz/${commit}`;
}
else {
tarball = hosted.tarball();
}
const tarball = hosted.tarball();
if (tarball) {

@@ -42,0 +31,0 @@ resolution = { tarball };

8

package.json
{
"name": "@pnpm/git-resolver",
"version": "0.3.5",
"version": "0.3.6",
"description": "Resolver for git-hosted packages",

@@ -36,5 +36,2 @@ "main": "lib/index.js",

"homepage": "https://github.com/pnpm/git-resolver#readme",
"peerDependencies": {
"@pnpm/logger": "^1.0.0"
},
"dependencies": {

@@ -46,3 +43,3 @@ "@pnpm/resolver-base": "^1.1.0",

"graceful-git": "^1.0.1",
"hosted-git-info": "^2.5.0",
"hosted-git-info": "^2.7.0",
"normalize-ssh": "^1.0.0",

@@ -52,3 +49,2 @@ "semver": "^5.5.0"

"devDependencies": {
"@pnpm/logger": "^1.0.0",
"@types/tape": "^4.2.31",

@@ -55,0 +51,0 @@ "mos": "^2.0.0-alpha.3",

Sorry, the diff of this file is not supported yet

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc