hosted-git-info - npm Package Compare versions

Comparing version 2.8.5 to 2.8.6

CHANGELOG.md

@@ -5,2 +5,7 @@ # Change Log
 
+<a name="2.8.6"></a>
+## [2.8.6](https://github.com/npm/hosted-git-info/compare/v2.8.5...v2.8.6) (2020-02-25)
+
+
+
 <a name="2.8.5"></a>
@@ -7,0 +12,0 @@ ## [2.8.5](https://github.com/npm/hosted-git-info/compare/v2.8.4...v2.8.5) (2019-10-07)

index.js

@@ -50,3 +50,3 @@ 'use strict'
       if (parsed.auth && authProtocols[parsed.protocol]) {
-        auth = decodeURIComponent(parsed.auth)
+        auth = parsed.auth
       }
@@ -110,3 +110,11 @@ var committish = parsed.hash ? decodeURIComponent(parsed.hash.substr(1)) : null
   var matched = giturl.match(/^([^@]+)@([^:/]+):[/]?((?:[^/]+[/])?[^/]+?)(?:[.]git)?(#.*)?$/)
-  if (!matched) return url.parse(giturl)
+  if (!matched) {
+    var legacy = url.parse(giturl)
+    if (legacy.auth) {
+      var whatwg = new url.URL(giturl)
+      legacy.auth = whatwg.username || ''
+      if (whatwg.password) legacy.auth += ':' + whatwg.password
+    }
+    return legacy
+  }
   return {
@@ -113,0 +121,0 @@ protocol: 'git+ssh:',

package.json

 {
   "name": "hosted-git-info",
-  "version": "2.8.5",
+  "version": "2.8.6",
   "description": "Provides metadata and conversions from repository urls for Github, Bitbucket and Gitlab",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

23578

increased by1.29%

Lines of code

335

increased by2.45%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes