getrepos - npm Package Compare versions

Comparing version 5.10.0-next.1592741200.ce6ea31d26f9b3a4d13d552f5d7a5a04c3f2900a to 5.10.0-next.1593046183.92d7fa56d43c80dff450b1757878d6a903e7dd44

edition-browsers/index.js

@@ -5,3 +5,4 @@ /* eslint camelcase:0 */
 import Pool from 'native-promise-pool'
-const ghapi = process.env.GITHUB_API || 'https://api.github.com'
+import { env } from 'process'
+const { GITHUB_API = 'https://api.github.com' } = env
 export function halt(milliseconds) {
@@ -24,3 +25,3 @@ if (milliseconds < 1000) {
 export async function getRepo(repoFullName) {
-	const url = `${ghapi}/repos/${repoFullName}`
+	const url = `${GITHUB_API}/repos/${repoFullName}`
 	const resp = await fetch(url, {
@@ -64,3 +65,3 @@ headers: getHeaders(),
 	// fetch
-	const url = `${ghapi}/search/repositories?page=${opts.page}&per_page=${
+	const url = `${GITHUB_API}/search/repositories?page=${opts.page}&per_page=${
 		opts.size
@@ -67,0 +68,0 @@ }&q=${encodeURIComponent(query)}`

edition-esnext/index.js

@@ -13,3 +13,4 @@ 'use strict'
 const native_promise_pool_1 = __importDefault(require('native-promise-pool'))
-const ghapi = process.env.GITHUB_API || 'https://api.github.com'
+const process_1 = require('process')
+const { GITHUB_API = 'https://api.github.com' } = process_1.env
 function halt(milliseconds) {
@@ -33,3 +34,3 @@ if (milliseconds < 1000) {
 async function getRepo(repoFullName) {
-	const url = `${ghapi}/repos/${repoFullName}`
+	const url = `${GITHUB_API}/repos/${repoFullName}`
 	const resp = await cross_fetch_1.default(url, {
@@ -75,3 +76,3 @@ headers: githubauthreq_1.getHeaders(),
 	// fetch
-	const url = `${ghapi}/search/repositories?page=${opts.page}&per_page=${
+	const url = `${GITHUB_API}/search/repositories?page=${opts.page}&per_page=${
 		opts.size
@@ -78,0 +79,0 @@ }&q=${encodeURIComponent(query)}`

package.json

 {
   "title": "Get Repositories",
   "name": "getrepos",
-  "version": "5.10.0-next.1592741200.ce6ea31d26f9b3a4d13d552f5d7a5a04c3f2900a",
+  "version": "5.10.0-next.1593046183.92d7fa56d43c80dff450b1757878d6a903e7dd44",
   "description": "Fetch the specified repositories, or those that match a particular github user or search query",
@@ -6,0 +6,0 @@ "homepage": "https://github.com/bevry/getrepos",

source/index.ts

@@ -8,3 +8,4 @@ /* eslint camelcase:0 */
 import Pool from 'native-promise-pool'
-const ghapi = process.env.GITHUB_API || 'https://api.github.com'
+import { env } from 'process'
+const { GITHUB_API = 'https://api.github.com' } = env
 
@@ -235,3 +236,3 @@ export function halt(milliseconds: number) {
 export async function getRepo(repoFullName: string): Promise<Repository> {
-	const url = `${ghapi}/repos/${repoFullName}`
+	const url = `${GITHUB_API}/repos/${repoFullName}`
 	const resp = await fetch(url, {
@@ -285,3 +286,3 @@ headers: getHeaders(),
 	// fetch
-	const url = `${ghapi}/search/repositories?page=${opts.page}&per_page=${
+	const url = `${GITHUB_API}/search/repositories?page=${opts.page}&per_page=${
 		opts.size
@@ -288,0 +289,0 @@ }&q=${encodeURIComponent(query)}`

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

50272

increased by0.21%

Lines of code

725

increased by0.42%

Number of low supply chain risk alerts

0

decreased by-100%

No dependency changes