builder-util - npm Package Compare versions

Comparing version 22.14.6 to 22.14.7

CHANGELOG.md

 # builder-util
 
+## 22.14.7
+
+### Patch Changes
+
+- [#6410](https://github.com/electron-userland/electron-builder/pull/6410) [`04a84352`](https://github.com/electron-userland/electron-builder/commit/04a84352b2b3fbb3c54533a8428bfd103df0af21) Thanks [@baparham](https://github.com/baparham)! - fix(builder-util): enable proxy handling in NodeHttpExecutor to fix requests/publishing behind corporate proxies
+
 ## 22.14.6
@@ -4,0 +10,0 @@

out/nodeHttpExecutor.js

@@ -6,3 +6,5 @@ "use strict";
 const http_1 = require("http");
+const http_proxy_agent_1 = require("http-proxy-agent");
 const https = require("https");
+const https_proxy_agent_1 = require("https-proxy-agent");
 class NodeHttpExecutor extends builder_util_runtime_1.HttpExecutor {
@@ -12,2 +14,8 @@ // noinspection JSMethodCanBeStatic
     createRequest(options, callback) {
+        if (process.env["https_proxy"] !== undefined && options.protocol === "https:") {
+            options.agent = new https_proxy_agent_1.HttpsProxyAgent(process.env["https_proxy"]);
+        }
+        else if (process.env["http_proxy"] !== undefined && options.protocol === "http:") {
+            options.agent = new http_proxy_agent_1.HttpProxyAgent(process.env["http_proxy"]);
+        }
         return (options.protocol === "http:" ? http_1.request : https.request)(options, callback);
@@ -14,0 +22,0 @@ }

package.json

 {
 	"name": "builder-util",
-	"version": "22.14.6",
+	"version": "22.14.7",
 	"main": "out/util.js",
@@ -28,2 +28,4 @@ "author": "Vladimir Krivosheev",
 		"fs-extra": "^10.0.0",
+		"http-proxy-agent": "^5.0.0",
+		"https-proxy-agent": "^5.0.0",
 		"is-ci": "^3.0.0",
@@ -30,0 +32,0 @@ "js-yaml": "^4.1.0",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

126597

increased by1.42%

Lines of code

1273

increased by0.63%

Worsened metrics

Dependency count

17

increased by13.33%

Number of low supply chain risk alerts

21

increased by31.25%

Number of medium supply chain risk alerts

5

increased by66.67%

Dependency changes

• + Addedhttp-proxy-agent@^5.0.0

• + Addedhttps-proxy-agent@^5.0.0

• + Added@tootallnate/once@2.0.0(transitive)

• + Addedagent-base@6.0.2(transitive)

• + Addedhttp-proxy-agent@5.0.0(transitive)

• + Addedhttps-proxy-agent@5.0.1(transitive)