git2consul - npm Package Compare versions

Comparing version 0.12.3 to 0.12.4

consul_data/raft/peers.json

@@ -1,1 +0,1 @@
-["172.17.8.26:8300"]
+["172.17.2.18:8300"]

lib/index.js

@@ -11,5 +11,5 @@ var logging = require('./logging.js');
 
-global.endpoint = "127.0.0.1";
-global.port = 8500;
-global.secure = false;
+global.endpoint = process.env.CONSUL_ENDPOINT || "127.0.0.1";
+global.port = process.env.CONSUL_PORT || 8500;
+global.secure = process.env.CONSUL_SECURE || false;
 global.config_key = "git2consul/config"
@@ -110,2 +110,1 @@ for (var i=2; i<process.argv.length; ++i) {
 });
-

package.json

 {
   "name": "git2consul",
   "description": "System for moving data from git to consul",
-  "version": "0.12.3",
+  "version": "0.12.4",
   "contributors": [
@@ -6,0 +6,0 @@ {

utils/config_seeder.js

@@ -8,5 +8,5 @@ var fs = require('fs');
 
-var endpoint = "127.0.0.1";
-var port = 8500;
-var secure = false;
+var endpoint = process.env.CONSUL_ENDPOINT || "127.0.0.1";
+var port = process.env.CONSUL_PORT || 8500;
+var secure = process.env.CONSUL_SECURE || false;
 for (var i=2; i<process.argv.length; ++i) {
@@ -13,0 +13,0 @@ if(process.argv[i] === '-s' || process.argv[i] === '--secure') secure = true;

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

28409993

Worsened metrics

Number of low supply chain risk alerts

32

increased by23.08%

No dependency changes