github - npm Package Compare versions

Comparing version 0.0.5 to 0.0.6

demo/oauth.js

@@ -0,1 +1,3 @@
+require("../support/paths");
+
 var http = require("http");
@@ -5,10 +7,11 @@ var Url = require("url");
 
-var GitHubApi = require("../lib/github").GitHubApi;
-var OAuth2 = require("../vendor/node-oauth/lib/oauth2").OAuth2;
+var GitHubApi = require("github").GitHubApi;
+var OAuth2 = require("oauth2").OAuth2;
 
 var github = new GitHubApi(true);
 var user = github.getUserApi();
+var repo = github.getRepoApi();
 
-var clientId = "3e5a546357431172f24d";
-var secret = "da60ce7426edfbd3d5253b096a2728e81d3bc9c5";
+var clientId = "e8c434a1c92e9de7ff8d";
+var secret = "1d0fcbb060e1dd86a0aa3d12265419c9bb19a333";
 var oauth = new OAuth2(clientId, secret, 'https://github.com/', 'login/oauth/authorize', 'login/oauth/access_token');
@@ -32,3 +35,3 @@
                   redirect_uri: 'http://localhost:7878/github-callback',
-                  scope: "user,repo"
+                  scope: "user,repo,gist"
                 })
@@ -35,0 +38,0 @@ });

lib/github.js

@@ -204,2 +204,16 @@ /**
     /**
+     * Get the pull API
+     *
+     * @return {PullApi} the pull API
+     */
+    this.getPullApi = function()
+    {
+        if(!this.$apis['pull']) {
+            this.$apis['pull'] = new (require("./github/PullApi").PullApi)(this);
+        }
+
+        return this.$apis['pull'];
+    };
+
+    /**
      * Get the object API
@@ -206,0 +220,0 @@ *

lib/github/RepoApi.js

@@ -137,7 +137,15 @@ /**
      * @param {String}  repo             the name of the repo
+     * @param {Boolean} anon             retreive non-github contributors
      */
-    this.getRepoContributors = function(username, repo, callback)
+    this.getRepoContributors = function(username, repo, anon, callback)
     {
+        if (typeof(anon) == 'function') {
+            callback = anon;
+            anon = '';
+        }
+        else {
+            anon = '/anon';
+        }
         this.$api.get(
-            'repos/show/' + encodeURI(username) + "/" + encodeURI(repo) + "/contributors",
+            'repos/show/' + encodeURI(username) + "/" + encodeURI(repo) + "/contributors" + anon,
             null, null,
@@ -144,0 +152,0 @@ this.$createListener(callback, "contributors")

package.json

 {
     "name" : "github",
-    "version" : "0.0.5",
+    "version" : "0.0.6",
     "description" : "Wrapper for the GitHub API",
@@ -13,2 +13,6 @@ "author": "Fabian Jakobs <[e-mail]>",
     "engine" : ["node >=0.4.0"],
+    "dependencies": {
+        "asyncjs": ">=0.0.3",
+        "oauth": ">=0.8.4"
+    },
     "licenses": [{
@@ -15,0 +19,0 @@ "type": "The MIT License",

README.md

@@ -55,3 +55,4 @@ # JavaScript GitHub API for node.js
 * Issues API: only _getList_ is implemented
-* Gist API: still missing 
+* Pulls API: only _getList_ is implemented
+* Gist API: still missing
 * Network API: still missing
@@ -58,0 +59,0 @@

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Unidentified License

License

(Experimental) Something that seems like a license was found, but its contents could not be matched with a known license.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

289980

90.89%

Number of package files

108

111.76%

Lines of code

6973

87.85%

Number of lines in readme file

89

1.14%

Worsened metrics

Dependency count

2

Infinity%

Number of low supply chain risk alerts

8

100%

Number of medium supply chain risk alerts

9

80%

Dependency changes

• + Added

  asyncjs@>=0.0.3

• + Added

  oauth@>=0.8.4

• + Added

  asyncjs@0.0.13
  (transitive)

• + Added

  oauth@0.10.2
  (transitive)