gh-release-fetch - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

dist/index.js

@@ -13,2 +13,3 @@ "use strict";
 const mkdirp = require("mkdirp");
+const node_fetch_1 = require("node-fetch");
 function fetchLatest(release) {
@@ -30,3 +31,3 @@ return __awaiter(this, void 0, void 0, function* () {
     return __awaiter(this, void 0, void 0, function* () {
-        const res = yield fetch(`https://api.github.com/repos/${repository}/releases/latest`);
+        const res = yield node_fetch_1.default(`https://api.github.com/repos/${repository}/releases/latest`);
         const json = yield res.json();
@@ -33,0 +34,0 @@ return json.tag_name;

package.json

 {
   "name": "gh-release-fetch",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "A library to fetch release binaries from GitHub Releases",
@@ -23,5 +23,7 @@ "main": "dist/index.js",
     "@types/mkdirp": "^0.5.2",
+    "@types/node-fetch": "^2.1.6",
     "download": "^7.1.0",
-    "mkdirp": "^0.5.1"
+    "mkdirp": "^0.5.1",
+    "node-fetch": "^2.3.0"
   }
 }

src/index.ts

 import * as download from 'download';
 import * as mkdirp from 'mkdirp';
+import fetch from 'node-fetch';
 
@@ -4,0 +5,0 @@ export interface Release {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

6791

increased by2.32%

Lines of code

154

increased by1.32%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Dependency count

6

increased by50%

Dependency changes

• + Added@types/node-fetch@^2.1.6

• + Addednode-fetch@^2.3.0

• + Added@types/node-fetch@2.6.12(transitive)

• + Addedasynckit@0.4.0(transitive)

• + Addedcombined-stream@1.0.8(transitive)

• + Addeddelayed-stream@1.0.0(transitive)

• + Addedform-data@4.0.1(transitive)

• + Addedmime-db@1.52.0(transitive)

• + Addedmime-types@2.1.35(transitive)

• + Addednode-fetch@2.7.0(transitive)

• + Addedtr46@0.0.3(transitive)

• + Addedwebidl-conversions@3.0.1(transitive)

• + Addedwhatwg-url@5.0.0(transitive)