@signalapp/ringrtc - npm Package Compare versions

Comparing version 2.36.0 to 2.37.0

dist/ringrtc/Service.d.ts

@@ -414,7 +414,7 @@ /// <reference types="node" />
     videoAspectRatio: number | undefined;
-    addedTime: string | undefined;
-    speakerTime: string | undefined;
+    addedTime: string;
+    speakerTime: string;
     forwardingVideo: boolean | undefined;
     isHigherResolutionPending: boolean;
-    constructor(demuxId: number, userId: Buffer, mediaKeysReceived: boolean);
+    constructor(demuxId: number, userId: Buffer, addedTime: string, speakerTime: string, mediaKeysReceived: boolean);
 }
@@ -421,0 +421,0 @@ export declare class GroupMemberInfo {

package.json

 {
   "name": "@signalapp/ringrtc",
-  "version": "2.36.0",
+  "version": "2.37.0",
   "description": "Signal Messenger voice and video calling library.",
@@ -28,3 +28,3 @@ "main": "dist/index.js",
     "prebuildUrl": "https://build-artifacts.signal.org/libraries/ringrtc-desktop-build-v${npm_package_version}.tar.gz",
-    "prebuildChecksum": "048a7ed95d0f56646a000e265eddbcbad00c3806381ab4442cff2d7c44dfdcdb"
+    "prebuildChecksum": "18e1b063d5c187491fa7666b2993cc62b7b76b9098257bd1f545ca350c6dc6f5"
   },
@@ -31,0 +31,0 @@ "author": "",

scripts/fetch-prebuild.js

@@ -18,7 +18,26 @@ //
 const VERSION = process.env.npm_package_version;
-const URL = process.env.npm_package_config_prebuildUrl.replace(
+
+let config;
+
+// When installing from the registry, `npm` doesn't set `npm_package_config_*`
+// environment variables. However, unlike `yarn`, `npm` always provides a path
+// to the `package.json` so we can read `config` from it.
+if (process.env.npm_package_json) {
+  const json = fs.readFileSync(process.env.npm_package_json, {
+    encoding: 'utf8',
+  });
+
+  ({ config } = JSON.parse(json));
+} else {
+  config = {
+    prebuildUrl: process.env.npm_package_config_prebuildUrl,
+    prebuildChecksum: process.env.npm_package_config_prebuildChecksum,
+  };
+}
+
+const URL = config.prebuildUrl.replace(
   '${npm_package_version}', // eslint-disable-line no-template-curly-in-string
   VERSION
 );
-const HASH = process.env.npm_package_config_prebuildChecksum;
+const HASH = config.prebuildChecksum;
 
@@ -25,0 +44,0 @@ const tmpFile = path.join(__dirname, 'unverified-prebuild.tmp');

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

406083

increased by0.15%

Lines of code

3243

increased by0.53%

Worsened metrics

Number of low supply chain risk alerts

10

increased by25%

No dependency changes