marmot-release - npm Package Compare versions

Comparing version 1.3.0 to 1.3.1

CHANGELOG.md

@@ -0,1 +1,16 @@
+## [1.3.1](https://github.com/MarmotHQ/marmot-release/compare/v1.3.0...v1.3.1) (2019-07-08)
+
+
+### Bug Fixes
+
+* **source:** handle 403 and 404 from source ([#14](https://github.com/MarmotHQ/marmot-release/issues/14)) ([8c1d166](https://github.com/MarmotHQ/marmot-release/commit/8c1d166))
+
+
+### Features
+
+* support .txt extname ([#17](https://github.com/MarmotHQ/marmot-release/issues/17)) ([a23a3b2](https://github.com/MarmotHQ/marmot-release/commit/a23a3b2))
+* update ([#15](https://github.com/MarmotHQ/marmot-release/issues/15)) ([ad0f289](https://github.com/MarmotHQ/marmot-release/commit/ad0f289))
+
+
+
 # [1.3.0](https://github.com/MarmotHQ/marmot-release/compare/v1.2.16...v1.3.0) (2019-06-03)
@@ -2,0 +17,0 @@

lib/upload.js

@@ -27,3 +27,3 @@ 'use strict';
   '.png', '.jpg', '.jpeg', '.webp', '.gif', '.svg',
-  '.json', '.ogg',
+  '.json', '.ogg', '.txt',
 ];
@@ -333,6 +333,12 @@ const extWhiteList = autoDetectContentType.concat([
   );
-  await urllib.request(sourceUrl, {
+  const response = await urllib.request(sourceUrl, {
     writeStream: fs.createWriteStream(downloadFile),
     timeout: REQUEST_TIMEOUTS,
   });
+  if (response.status === 404) {
+    throw new Error('Fetch Source: NotFound');
+  };
+  if (response.status === 403) {
+    throw new Error('Fetch Source: Forbidden');
+  }
   return {
@@ -339,0 +345,0 @@ downloadDir,

package.json

 {
   "name": "marmot-release",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "marmot release tool",
@@ -5,0 +5,0 @@ "main": "index.js",

Fixed alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

22765

increased by3.64%

Lines of code

516

increased by1.18%

Number of medium supply chain risk alerts

0

decreased by-100%

No dependency changes