nano - npm Package Compare versions

Comparing version 6.1.5 to 6.2.0

lib/nano.js

@@ -63,2 +63,9 @@ // Licensed under the Apache License, Version 2.0 (the 'License'); you may not
   }
+  
+  function scrub(str) {
+    if (str) {
+      str = str.replace(/\/\/(.*)@/,"//XXXXXX:XXXXXX@");
+    }
+    return str;
+  }
 
@@ -228,2 +235,9 @@ function relax(opts, callback) {
 
+      // scrub credentials
+      req.uri = scrub(req.uri);
+      rh.uri = scrub(rh.uri);
+      if (req.headers.cookie) {
+        req.headers.cookie = "XXXXXXX";
+      }
+
       callback(errs.merge({
@@ -490,2 +504,11 @@ message: 'couch returned ' + rh.statusCode,
 
+      // Several search parameters must be JSON-encoded; but since this is an
+      // object API, several parameters need JSON endoding.
+      var paramsToEncode = ['counts', 'drilldown', 'group_sort', 'ranges', 'sort'];
+      paramsToEncode.forEach(function(param) {
+        if (param in qs) {
+          qs[param] = JSON.stringify(qs[param]);
+        }
+      });
+
       if (qs && qs.keys) {
@@ -492,0 +515,0 @@ var body = {keys: qs.keys};

package.json

 {
   "name": "nano",
-  "description": "minimalistic couchdb driver for node.js",
+  "description": "The official CouchDB client for Node.js",
   "license": "Apache-2.0",
   "homepage": "http://github.com/dscape/nano",
   "repository": "git://github.com/dscape/nano",
-  "version": "6.1.5",
-  "author": "Nuno Job <[e-mail]> (http://nunojob.com)",
+  "version": "6.2.0",
+  "author": "Apache CouchDB <[e-mail]> (http://couchdb.apache.org)",
   "keywords": [
@@ -34,4 +34,3 @@ "couchdb",
     "endswith": "^0.0.0",
-    "tape-it": "^0.3.1",
-    "pre-commit": "0.0.9"
+    "tape-it": "^0.3.1"
   },
@@ -38,0 +37,0 @@ "scripts": {

README.md

@@ -290,3 +290,3 @@ [![By](https://img.shields.io/badge/made%20by-yld!-32bbee.svg?style=flat-square)](http://yld.io/contact?source=github-nano)[![Chat](https://img.shields.io/badge/help-gitter-eb9348.svg?style=flat-square)](https://gitter.im/dscape/nano)[![Tests](http://img.shields.io/travis/dscape/nano.svg?style=flat-square)](https://travis-ci.org/dscape/nano)![Coverage](https://img.shields.io/badge/coverage-100%-ff69b4.svg?style=flat-square)[![Dependencies](https://img.shields.io/david/dscape/nano.svg?style=flat-square)](https://david-dm.org/dscape/nano)[![NPM](http://img.shields.io/npm/v/nano.svg?style=flat-square)](http://browsenpm.org/package/nano)
 
-uses [follow] to create a solid changes feed. please consult follow documentation for more information as this is a very complete api on it's own
+Uses [Follow] to create a solid changes feed. please consult follow documentation for more information as this is a very complete API on it's own.
 
@@ -383,5 +383,5 @@ ``` js
 
-uses [follow](https://github.com/iriscouch/follow) to create a solid
+Use [Follow](https://github.com/jhs/follow) to create a solid
 [`_db_updates`](http://docs.couchdb.org/en/latest/api/server/common.html?highlight=db_updates#get--_db_updates) feed.
-please consult follow documentation for more information as this is a very complete api on it's own
+Please consult follow documentation for more information as this is a very complete api on it's own
 
@@ -865,4 +865,4 @@ ```js
 [4]: https://github.com/dscape/nano/blob/master/cfg/couch.example.js
-[follow]: https://github.com/iriscouch/follow
-[request]:  https://github.com/mikeal/request
+[follow]: https://github.com/jhs/follow
+[request]:  https://github.com/request/request
 
@@ -869,0 +869,0 @@ ## license

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

210548

increased by0.3%

Dev dependency count

8

decreased by-11.11%

Lines of code

5005

increased by0.4%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes