@saucelabs/bin-wrapper - npm Package Compare versions

Comparing version 0.2.0 to 0.3.0

dist/download.js

@@ -13,2 +13,3 @@ "use strict";
 const tar_1 = __importDefault(require("./archive/tar"));
+const https_proxy_agent_1 = require("https-proxy-agent");
 async function downloadAndUnpack(url, filepath, binary, options = {}) {
@@ -24,7 +25,22 @@ const payload = await download(url, options);
 exports.downloadAndUnpack = downloadAndUnpack;
+function getHttpsProxyValue() {
+    for (const k of Object.keys(process.env)) {
+        if (k.toUpperCase() === "HTTPS_PROXY") {
+            return process.env[k];
+        }
+    }
+    return undefined;
+}
 async function download(url, options) {
-    return await axios_1.default.get(url.toString(), {
+    const opts = {
+        headers: options.headers,
         responseType: 'arraybuffer',
-        headers: options.headers,
-    }).then((res) => {
+    };
+    const httpsProxy = getHttpsProxyValue();
+    if (httpsProxy && url.protocol === 'https:') {
+        opts.httpsAgent = new https_proxy_agent_1.HttpsProxyAgent(httpsProxy);
+        // Disable axios' native proxy, because we are letting HttpsProxyAgent handle it.
+        opts.proxy = false;
+    }
+    return await axios_1.default.get(url.toString(), opts).then((res) => {
         return res.data;
@@ -31,0 +47,0 @@ }).catch((err) => {

package.json

 {
   "name": "@saucelabs/bin-wrapper",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Fetches and runs a binary",
@@ -5,0 +5,0 @@ "main": "dist/index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

30278

increased by1.97%

Lines of code

326

increased by5.16%

Worsened metrics

Number of low supply chain risk alerts

4

increased by100%

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes