Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

libnpmpublish

Package Overview
Dependencies
Maintainers
5
Versions
58
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

libnpmpublish - npm Package Compare versions

Comparing version 7.5.0 to 7.5.1

8

lib/provenance.js

@@ -22,5 +22,7 @@ const { sigstore } = require('sigstore')

/* istanbul ignore next - not covering missing env var case */
const [workflowPath, workflowRef] = (env.GITHUB_WORKFLOW_REF || '')
.replace(env.GITHUB_REPOSITORY + '/', '')
.split('@')
const relativeRef = (env.GITHUB_WORKFLOW_REF || '').replace(env.GITHUB_REPOSITORY + '/', '')
const delimiterIndex = relativeRef.indexOf('@')
const workflowPath = relativeRef.slice(0, delimiterIndex)
const workflowRef = relativeRef.slice(delimiterIndex + 1)
payload = {

@@ -27,0 +29,0 @@ _type: INTOTO_STATEMENT_V1_TYPE,

{
"name": "libnpmpublish",
"version": "7.5.0",
"version": "7.5.1",
"description": "Programmatic API for the bits behind npm publish and unpublish",

@@ -29,3 +29,3 @@ "author": "GitHub Inc.",

"@npmcli/mock-registry": "^1.0.0",
"@npmcli/template-oss": "4.14.1",
"@npmcli/template-oss": "4.19.0",
"lodash.clonedeep": "^4.5.0",

@@ -57,3 +57,3 @@ "nock": "^13.3.0",

"//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
"version": "4.14.1",
"version": "4.19.0",
"content": "../../scripts/template-oss/index.js"

@@ -60,0 +60,0 @@ },

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc