editorconfig-checker - npm Package Compare versions

Comparing version 3.1.0 to 3.2.0

CHANGELOG.md

 # Changelog
 
 ## Unreleased
+
 ### Added
+
 ### Changed
+
 ### Deprecated
+
 ### Removed
+
 ### Fixed
+
 ### Security
+
 ### Misc
 
+## [3.2.0] - 2020-09-11
+
+- add proxy option and throw error if download fails [#203](https://github.com/editorconfig-checker/editorconfig-checker.javascript/pull/203) ([@bufferoverflow](https://github.com/bufferoverflow))
+
 ## [3.1.0] - 2020-06-07
+
 see: https://github.com/editorconfig-checker/editorconfig-checker/releases/tag/2.1.0
 
 ## [3.0.5] - 2020-05-18
+
 see: https://github.com/editorconfig-checker/editorconfig-checker/releases/tag/2.0.4
 
 ## [3.0.4] - 2020-03-05
-* Exchange deprecated `request`-package with `node-fetch` [#141](https://github.com/editorconfig-checker/editorconfig-checker.javascript/pull/141) ([@mstruebing](https://github.com/mstruebing))
 
+- Exchange deprecated `request`-package with `node-fetch` [#141](https://github.com/editorconfig-checker/editorconfig-checker.javascript/pull/141) ([@mstruebing](https://github.com/mstruebing))
+
 ## [3.0.3] - 2019-08-19
+
 see: https://github.com/editorconfig-checker/editorconfig-checker/releases/tag/2.0.3
 
 ## [3.0.2] - 2019-08-19
+
 see: https://github.com/editorconfig-checker/editorconfig-checker/releases/tag/2.0.2
 
 ## [3.0.1] - 2019-08-18
+
 see: https://github.com/editorconfig-checker/editorconfig-checker/releases/tag/2.0.1
 
 ## [3.0.0] - 2019-08-18
+
 !!!BREAKING
@@ -35,57 +53,81 @@ see: https://github.com/editorconfig-checker/editorconfig-checker/releases/tag/2.0.0
 ### Misc
-* update some minor versions
 
+- update some minor versions
+
 ## [2.2.0] - 2019-08-06
+
 see: https://github.com/editorconfig-checker/editorconfig-checker/releases/tag/1.3.0
+
 ### Misc
-* update to node v12
 
+- update to node v12
+
 ## [2.1.1] - 2019-07-06
+
 see: https://github.com/editorconfig-checker/editorconfig-checker/releases/tag/1.2.1
 
 ## [2.1.0] - 2019-05-02
+
 see: https://github.com/editorconfig-checker/editorconfig-checker/releases/tag/1.2.0
 
 ## [2.0.8] - 2019-04-21
+
 ### Misc
-* Add some not needed folders/files to `.npmignore` to make the release smaller
-* Adjust `.nvmrc` to reflect current `@types/node` version
 
+- Add some not needed folders/files to `.npmignore` to make the release smaller
+- Adjust `.nvmrc` to reflect current `@types/node` version
+
 ## [2.0.7] - 2019-04-20
+
 ### Added
-* better release process through `make release`
+
+- better release process through `make release`
+
 ### Fixed
-* exchange deprecated `prepublish` script with `prepare`
-* insert_final_newline behavior according to specification (https://github.com/editorconfig-checker/editorconfig-checker/pull/56)
 
+- exchange deprecated `prepublish` script with `prepare`
+- insert_final_newline behavior according to specification (https://github.com/editorconfig-checker/editorconfig-checker/pull/56)
 
 ## [2.0.6] - 2019-03-16
+
 ## Fixed
+
 - use `CGO_ENABLED=0` to let Go binary run on alpine
 
 ## [2.0.5] - 2019-03-01
+
 ## Fixed
+
 - Use `.exe` binary for windows again
 
 ## [2.0.4] - 2019-03-01
+
 ## Fixed
+
 - Use `.exe` binary for windows
 
 ## [2.0.2] - 2019-03-01
+
 ## Fixed
+
 - Updated core for windows compatibility see: https://github.com/editorconfig-checker/editorconfig-checker/releases/tag/1.1.1
 
 ## [2.0.1] - 2019-02-27
+
 ## BREAKING
+
 - use [editorconfig-checker](https://github.com/editorconfig-checker/editorconfig-checker) as core and only have a typescript wrapper.
 
 ## [1.4.0] - 2019-02-16
+
 ## Added
+
 - alias from `editorconfig-checker` to `ec`
 
 ## Removed
+
 - unused dependency with security issue (glob-fs) thanks to [Ruxandra Fediuc](https://github.com/ruxandrafed)
 
 ## Updated
+
 - xo to 0.24.0 and adjusted code style
-

dist/index.js

 #!/usr/bin/env node
 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
 var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
@@ -41,3 +60,3 @@ function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
 var child_process_1 = require("child_process");
-var tar = require("tar");
+var tar = __importStar(require("tar"));
 var utils_1 = require("./utils");
@@ -90,2 +109,5 @@ var CORE_VERSION = "2.1.0";
     });
-}); })();
+}); })().catch(function (e) {
+    console.error("ERROR:", e);
+    process.exit(1);
+});

dist/utils.js

 "use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.removeFile = exports.downloadFile = exports.downloadUrl = exports.isFile = exports.binary = exports.binaryPath = exports.ecRootDir = exports.getReleaseNameForCurrentPlatform = exports.arch = exports.platform = exports.getReleaseArchiveNameForCurrentPlatform = void 0;
-var fs = require("fs");
-var os = require("os");
-var node_fetch_1 = require("node-fetch");
+var fs = __importStar(require("fs"));
+var os = __importStar(require("os"));
+var node_fetch_1 = __importDefault(require("node-fetch"));
+var https_proxy_agent_1 = require("https-proxy-agent");
 exports.getReleaseArchiveNameForCurrentPlatform = function () {
@@ -60,3 +83,6 @@ return exports.getReleaseNameForCurrentPlatform() + ".tar.gz";
     }
-    return node_fetch_1.default(url).then(function (res) { return res.body.pipe(fs.createWriteStream(dest)); });
+    var proxy = process.env.https_proxy || process.env.http_proxy || "";
+    return node_fetch_1.default(url, {
+        agent: proxy ? new https_proxy_agent_1.HttpsProxyAgent(proxy) : null,
+    }).then(function (res) { return res.body.pipe(fs.createWriteStream(dest)); });
 };
@@ -63,0 +89,0 @@ exports.removeFile = function (path) {

package.json

 {
   "name": "editorconfig-checker",
-  "version": "3.1.0",
+  "version": "3.2.0",
   "description": "A tool to verify that your files are in harmony with your .editorconfig",
@@ -39,2 +39,3 @@ "main": "src/index.js",
   "dependencies": {
+    "https-proxy-agent": "^5.0.0",
     "node-fetch": "^2.6.0",
@@ -49,4 +50,4 @@ "tar": "^6.0.0"
     "tslint-config-prettier": "^1.18.0",
-    "typescript": "^3.5.3"
+    "typescript": "^4.0.2"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

18710

increased by15.46%

Lines of code

202

increased by31.17%

Worsened metrics

Dependency count

3

increased by50%

Number of low supply chain risk alerts

3

increased by200%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• + Addedhttps-proxy-agent@^5.0.0

• + Addedagent-base@6.0.2(transitive)

• + Addeddebug@4.3.7(transitive)

• + Addedhttps-proxy-agent@5.0.1(transitive)

• + Addedms@2.1.3(transitive)