Huge News!Announcing our $40M Series B led by Abstract Ventures.Learn More
Socket
Sign inDemoInstall
Socket

lockfile-lint-api

Package Overview
Dependencies
Maintainers
1
Versions
55
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

lockfile-lint-api - npm Package Compare versions

Comparing version 2.2.0 to 2.3.0

11

CHANGELOG.md

@@ -6,2 +6,13 @@ # Change Log

# [2.3.0](https://github.com/lirantal/lockfile-lint/compare/lockfile-lint-api@2.2.0...lockfile-lint-api@2.3.0) (2019-11-07)
### Features
* **errors:** provide the actual bad string in ValidateScheme ([#20](https://github.com/lirantal/lockfile-lint/issues/20)) ([45fb7d2](https://github.com/lirantal/lockfile-lint/commit/45fb7d2))
# [2.2.0](https://github.com/lirantal/lockfile-lint/compare/lockfile-lint-api@2.1.4...lockfile-lint-api@2.2.0) (2019-10-24)

@@ -8,0 +19,0 @@

4

package.json
{
"name": "lockfile-lint-api",
"version": "2.2.0",
"version": "2.3.0",
"description": "Lint an npm or yarn lockfile to analyze and detect issues",

@@ -176,3 +176,3 @@ "main": "index.js",

},
"gitHead": "dfa2a3021c4567860d3a59f81efea0cef76ec61c"
"gitHead": "abc71fa09a39ef2975648ac540eb4c57534ee463"
}

@@ -42,3 +42,5 @@ 'use strict'

validationResult.errors.push({
message: `detected invalid host for package: ${packageName}`,
message: `detected invalid host(s) for package: ${packageName}\n expected: ${allowedHosts}\n actual: ${
packageResolvedURL.host
}\n`,
package: packageName

@@ -45,0 +47,0 @@ })

@@ -33,3 +33,5 @@ 'use strict'

validationResult.errors.push({
message: `detected non-https protocol used for package: ${packageName}`,
message: `detected invalid protocol for package: ${packageName}\n expected: ${HTTPS_PROTOCOL}\n actual: ${
packageResolvedURL.protocol
}\n`,
package: packageName

@@ -36,0 +38,0 @@ })

@@ -32,7 +32,8 @@ 'use strict'

}
if (schemes.indexOf(packageResolvedURL.protocol) === -1) {
// throw new Error(`detected invalid origin for package: ${packageName}`)
validationResult.errors.push({
message: `detected invalid scheme for package: ${packageName}`,
message: `detected invalid scheme(s) for package: ${packageName}\n expected: ${schemes}\n actual: ${
packageResolvedURL.protocol
}\n`,
package: packageName

@@ -39,0 +40,0 @@ })

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc