mongodb-memory-server-core - npm Package Compare versions

Comparing version 6.6.0 to 6.6.1

CHANGELOG.md

@@ -6,2 +6,13 @@ # Change Log
 
+## [6.6.1](https://github.com/nodkz/mongodb-memory-server/compare/v6.6.0...v6.6.1) (2020-05-20)
+
+
+### Bug Fixes
+
+* read strict-ssl from npm config ([#310](https://github.com/nodkz/mongodb-memory-server/issues/310)) ([3ede8d1](https://github.com/nodkz/mongodb-memory-server/commit/3ede8d1)), closes [#308](https://github.com/nodkz/mongodb-memory-server/issues/308)
+
+
+
+
+
 # [6.6.0](https://github.com/nodkz/mongodb-memory-server/compare/v6.5.2...v6.6.0) (2020-05-11)
@@ -8,0 +19,0 @@

lib/util/__tests__/MongoBinaryDownload-test.js

@@ -103,3 +103,3 @@ "use strict";
     }); });
-    it('should not reject unauthorized when strict-ssl is false in env vars', function () { return __awaiter(void 0, void 0, void 0, function () {
+    it('should not reject unauthorized when npm strict-ssl config is false', function () { return __awaiter(void 0, void 0, void 0, function () {
         var du, callArg1;
@@ -109,3 +109,4 @@ return __generator(this, function (_a) {
                 case 0:
-                    process.env['npm_config_strict-ssl'] = 'false';
+                    // npm sets false config value as empty string in env vars
+                    process.env['npm_config_strict_ssl'] = '';
                     du = new MongoBinaryDownload_1.default({});
@@ -124,3 +125,3 @@ du.httpDownload = jest.fn();
     }); });
-    it('should reject unauthorized when strict-ssl is not in env vars', function () { return __awaiter(void 0, void 0, void 0, function () {
+    it('should reject unauthorized when npm strict-ssl config is true', function () { return __awaiter(void 0, void 0, void 0, function () {
         var du, callArg1;
@@ -130,3 +131,4 @@ return __generator(this, function (_a) {
                 case 0:
-                    delete process.env['npm_config_strict-ssl'];
+                    // npm sets true config value as string 'true' in env vars
+                    process.env['npm_config_strict_ssl'] = 'true';
                     du = new MongoBinaryDownload_1.default({});
@@ -133,0 +135,0 @@ du.httpDownload = jest.fn();

lib/util/MongoBinaryDownload.js

@@ -203,3 +203,3 @@ "use strict";
                             process.env.HTTP_PROXY;
-                        strictSsl = process.env['npm_config_strict-ssl'] === 'false' ? false : true;
+                        strictSsl = process.env.npm_config_strict_ssl === 'true';
                         urlObject = url_1.default.parse(downloadUrl);
@@ -206,0 +206,0 @@ if (!urlObject.hostname || !urlObject.path) {

package.json

 {
   "name": "mongodb-memory-server-core",
-  "version": "6.6.0",
+  "version": "6.6.1",
   "description": "MongoDB Server for testing (core package, without autodownload). The server will allow you to connect your favourite ODM or client library to the MongoDB Server and run parallel integration tests isolated from each other.",
@@ -93,3 +93,3 @@ "main": "lib/index",
   },
-  "gitHead": "73ac9411cffbc23ce3ebb487792ba3e16838ea59"
+  "gitHead": "2974d49aebe35f176af2a20c5e28da563008b34d"
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

358195

increased by0.14%

Lines of code

5127

increased by0.04%

No dependency changes