autorelease-gitlab
Advanced tools
+49
-4
@@ -42,2 +42,40 @@ 'use strict'; | ||
| babelHelpers.slicedToArray = function () { | ||
| function sliceIterator(arr, i) { | ||
| var _arr = []; | ||
| var _n = true; | ||
| var _d = false; | ||
| var _e = undefined; | ||
| try { | ||
| for (var _i = arr[Symbol.iterator](), _s; !(_n = (_s = _i.next()).done); _n = true) { | ||
| _arr.push(_s.value); | ||
| if (i && _arr.length === i) break; | ||
| } | ||
| } catch (err) { | ||
| _d = true; | ||
| _e = err; | ||
| } finally { | ||
| try { | ||
| if (!_n && _i["return"]) _i["return"](); | ||
| } finally { | ||
| if (_d) throw _e; | ||
| } | ||
| } | ||
| return _arr; | ||
| } | ||
| return function (arr, i) { | ||
| if (Array.isArray(arr)) { | ||
| return arr; | ||
| } else if (Symbol.iterator in Object(arr)) { | ||
| return sliceIterator(arr, i); | ||
| } else { | ||
| throw new TypeError("Invalid attempt to destructure non-iterable instance"); | ||
| } | ||
| }; | ||
| }(); | ||
| babelHelpers; | ||
@@ -64,6 +102,5 @@ | ||
| yield request({ | ||
| var _ref2 = yield request({ | ||
| url: `/projects/${ encodeURIComponent(repo) }/repository/tags`, | ||
| baseUrl: gitlabUrl || "https://gitlab.com", | ||
| baseUrl: gitlabUrl || "https://gitlab.com/api/v3", | ||
| method: "POST", | ||
@@ -77,3 +114,3 @@ headers: { | ||
| }, | ||
| type: "json", | ||
| json: true, | ||
| body: { | ||
@@ -83,2 +120,10 @@ release_description: log | ||
| }); | ||
| var _ref3 = babelHelpers.slicedToArray(_ref2, 2); | ||
| let resp = _ref3[0]; | ||
| let body = _ref3[1]; | ||
| if (resp.statusCode >= 400) throw body; | ||
| }); | ||
@@ -85,0 +130,0 @@ return function (_x, _x2) { |
+1
-1
@@ -36,3 +36,3 @@ { | ||
| }, | ||
| "version": "1.0.0" | ||
| "version": "1.0.1" | ||
| } |
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 7 instances in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 7 instances in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
8255
13.63%177
26.43%