@zernio/node - npm Package Compare versions

Comparing version 0.2.171 to 0.2.172

package.json

 {
   "name": "@zernio/node",
-  "version": "0.2.171",
+  "version": "0.2.172",
   "description": "The official Node.js library for the Zernio API",
@@ -5,0 +5,0 @@ "main": "dist/index.js",

src/client.ts

@@ -0,1 +1,2 @@
+import packageJson from '../package.json';
 import {
@@ -968,5 +969,12 @@ client,
 
-    // Configure the generated client
+    // Configure the generated client. User-Agent and defaultHeaders are
+    // applied at config time (not via the interceptor) because Node 20's
+    // undici treats User-Agent as a forbidden header on already-constructed
+    // Request objects, silently dropping `headers.set('User-Agent', …)`.
     client.setConfig({
       baseUrl: this.baseURL,
+      headers: {
+        'User-Agent': `zernio-node/${packageJson.version}`,
+        ...(options.defaultHeaders ?? {}),
+      },
     });
@@ -977,7 +985,2 @@
       request.headers.set('Authorization', `Bearer ${this.apiKey}`);
-      if (options.defaultHeaders) {
-        for (const [key, value] of Object.entries(options.defaultHeaders)) {
-          request.headers.set(key, value);
-        }
-      }
       return request;
@@ -984,0 +987,0 @@ });

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2150224

0.31%

Lines of code

45038

0.44%

Worsened metrics

Number of medium supply chain risk alerts

49

13.95%

No dependency changes