@signalapp/ringrtc - npm Package Compare versions

Comparing version 2.34.3 to 2.34.4

package.json

 {
   "name": "@signalapp/ringrtc",
-  "version": "2.34.3",
+  "version": "2.34.4",
   "description": "Signal Messenger voice and video calling library.",
@@ -27,3 +27,3 @@ "main": "dist/index.js",
     "prebuildUrl": "https://build-artifacts.signal.org/libraries/ringrtc-desktop-build-v${npm_package_version}.tar.gz",
-    "prebuildChecksum": "04c645ce226431879362474ffa2b59deea23516b35c14d480f4e120ac2d90f40"
+    "prebuildChecksum": "8c94d3dfb6b79167d8a7be3361426d5421c4816d5158ef9507cd051dbd4d75f6"
   },
@@ -33,2 +33,3 @@ "author": "",
   "dependencies": {
+    "https-proxy-agent": "7.0.1",
     "tar": "^6.1.0"
@@ -35,0 +36,0 @@ },

scripts/fetch-prebuild.js

@@ -9,2 +9,3 @@ //
 const https = require('https');
+const { HttpsProxyAgent } = require('https-proxy-agent');
 const fs = require('fs');
@@ -55,3 +56,7 @@ const path = require('path');
   return new Promise((resolve, reject) => {
-    https.get(URL, async res => {
+    let options = {};
+    if (process.env.HTTPS_PROXY != undefined) {
+      options.agent = new HttpsProxyAgent(process.env.HTTPS_PROXY);
+    }
+    https.get(URL, options, async res => {
       try {
@@ -58,0 +63,0 @@ const out = fs.createWriteStream(tmpFile);

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

393540

increased by0.06%

Lines of code

3242

increased by0.15%

Worsened metrics

Dependency count

2

increased by100%

Number of low supply chain risk alerts

8

increased by33.33%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedhttps-proxy-agent@7.0.1

• + Addedagent-base@7.1.3(transitive)

• + Addeddebug@4.4.0(transitive)

• + Addedhttps-proxy-agent@7.0.1(transitive)

• + Addedms@2.1.3(transitive)