ghost-storage-adapter-s3 - npm Package Compare versions

Comparing version 2.7.0 to 2.8.0

index.js

@@ -52,2 +52,3 @@ 'use strict';
         forcePathStyle = config.forcePathStyle,
+        signatureVersion = config.signatureVersion,
         acl = config.acl;
@@ -69,2 +70,3 @@
     this.s3ForcePathStyle = Boolean(process.env.GHOST_STORAGE_ADAPTER_S3_FORCE_PATH_STYLE) || Boolean(forcePathStyle) || false;
+    this.signatureVersion = process.env.GHOST_STORAGE_ADAPTER_S3_SIGNATURE_VERSION || signatureVersion || 'v4';
     this.acl = process.env.GHOST_STORAGE_ADAPTER_S3_ACL || acl || 'public-read';
@@ -105,2 +107,3 @@ }
       region: this.region,
+      signatureVersion: this.signatureVersion,
       s3ForcePathStyle: this.s3ForcePathStyle
@@ -107,0 +110,0 @@

package.json

@@ -76,3 +76,3 @@ {
   },
-  "version": "2.7.0"
+  "version": "2.8.0"
 }

README.md

@@ -27,2 +27,3 @@ # Ghost storage adapter S3
     "assetHost": "YOUR_OPTIONAL_CDN_URL (See note 1 below)",
+    "signatureVersion": "REGION_SIGNATURE_VERSION (See note 5 below)",
     "pathPrefix": "YOUR_OPTIONAL_BUCKET_SUBDIRECTORY",
@@ -44,2 +45,4 @@ "endpoint": "YOUR_OPTIONAL_ENDPOINT_URL (only needed for 3rd party S3 providers)",
 
+Note 5: [Support for AWS4-HMAC-SHA256](https://github.com/colinmeinke/ghost-storage-adapter-s3/issues/43)
+
 ### Via environment variables
@@ -135,2 +138,2 @@
 
-[ISC](./LICENSE.md).
+[ISC](./LICENSE.md)

src/index.js

@@ -24,2 +24,3 @@ import AWS from 'aws-sdk'
       forcePathStyle,
+      signatureVersion,
       acl
@@ -41,2 +42,3 @@ } = config
     this.s3ForcePathStyle = Boolean(process.env.GHOST_STORAGE_ADAPTER_S3_FORCE_PATH_STYLE) || Boolean(forcePathStyle) || false
+    this.signatureVersion = process.env.GHOST_STORAGE_ADAPTER_S3_SIGNATURE_VERSION || signatureVersion || 'v4'
     this.acl = process.env.GHOST_STORAGE_ADAPTER_S3_ACL || acl || 'public-read'
@@ -71,2 +73,3 @@ }
       region: this.region,
+      signatureVersion: this.signatureVersion,
       s3ForcePathStyle: this.s3ForcePathStyle
@@ -73,0 +76,0 @@ }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

271989

increased by0.21%

Lines of code

287

increased by2.14%

Number of lines in readme file

137

increased by2.24%

Worsened metrics

Number of low supply chain risk alerts

20

increased by11.11%

No dependency changes