@varsityvibe/api-client - npm Package Compare versions

Comparing version 1.3.30 to 1.3.31

package.json

 {
     "name": "@varsityvibe/api-client",
     "description": "API client for the Varsity Vibe web and mobile apps",
-    "version": "1.3.30",
+    "version": "1.3.31",
     "author": "Tiaan du Plessis <[e-mail]>",
@@ -6,0 +6,0 @@ "type": "module",

src/routes/deals.js

@@ -14,3 +14,3 @@ import client from '../utils/fetch-client'
    */
-  get (body = {}, config = { headers: { 'X-TENANT-ID': 'J|45_fqw', sensitive: true } }) {
+  get (body = {}, config = { headers: { 'X-TENANT-ID': process.env.TENANT_ID, sensitive: true } }) {
     config.params = body
@@ -17,0 +17,0 @@ return client.get('/v2/deals', config)

src/routes/members.js

@@ -50,3 +50,3 @@ import axios from 'axios'
         method: 'post',
-        url: 'https://api2.varsityvibe.co.za/api/v2/members/upload_photo',
+        url: `${process.env.API_BASE_URL}${path}/upload_photo`,
         data: formData,
@@ -71,3 +71,3 @@ headers: { ...headers, 'Content-Type': 'multipart/form-data' },
     const fieldName = type === 'local' ? 'id_number' : 'passport_number'
-    return axios.post(`https://api2.varsityvibe.co.za/api${path}/sb_free_verification?api_key=${apiKey}&${fieldName}=${number}`, config)
+    return axios.post(`${process.env.API_BASE_URL}${path}/sb_free_verification?api_key=${apiKey}&${fieldName}=${number}`, config)
   },
@@ -74,0 +74,0 @@

src/routes/vouchers.js

@@ -21,3 +21,3 @@ import client from '../utils/fetch-client'
     return fetch(
-      `https://api2.varsityvibe.co.za/api/v2/redemption/validate?voucher_id=${id}&api_key=${apiKey}`,
+      `${process.env.API_BASE_URL}/v2/redemption/validate?voucher_id=${id}&api_key=${apiKey}`,
       {
@@ -24,0 +24,0 @@ method: 'GET',

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

205451

-0.01%

Number of low supply chain risk alerts

9

50%

No dependency changes