node-pre-gyp - npm Package Compare versions

Comparing version 0.6.31 to 0.6.32

CHANGELOG.md

 # node-pre-gyp changelog
 
+## 0.6.32
+
+ - Honor npm configuration for CA bundles (@heikkipora)
+ - Add node-pre-gyp and npm versions to user agent (@addaleax)
+ - Updated various deps
+ - Add known node version for v7.x
+
 ## 0.6.31
@@ -4,0 +11,0 @@

lib/install.js

@@ -16,2 +16,9 @@ "use strict";
 
+var npgVersion = 'unknown';
+try {
+    // Read own package.json to get the current node-pre-pyp version.
+    var ownPackageJSON = fs.readFileSync(path.join(__dirname, '..', 'package.json'), 'utf8');
+    npgVersion = JSON.parse(ownPackageJSON).version;
+} catch (e) {}
+
 function download(uri,opts,callback) {
@@ -21,9 +28,24 @@ log.http('GET', uri);
     var req = null;
+
+    // Try getting version info from the currently running npm.
+    var envVersionInfo = process.env.npm_config_user_agent ||
+        'node ' + process.version;
+
     var requestOpts = {
         uri: uri.replace('+','%2B'),
         headers: {
-          'User-Agent': 'node-pre-gyp (node ' + process.version + ')'
+          'User-Agent': 'node-pre-gyp (v' + npgVersion + ', ' + envVersionInfo + ')'
         }
     };
 
+    if (opts.cafile) {
+        try {
+            requestOpts.ca = fs.readFileSync(opts.cafile);
+        } catch (e) {
+            return callback(e);
+        }
+    } else if (opts.ca) {
+        requestOpts.ca = opts.ca;
+    }
+
     var proxyUrl = opts.proxy ||
@@ -152,2 +174,6 @@ process.env.http_proxy ||
         }
+
+        opts.ca = gyp.opts.ca;
+        opts.cafile = gyp.opts.cafile;
+
         var from = opts.hosted_tarball;
@@ -154,0 +180,0 @@ var to = opts.module_path;

lib/node-pre-gyp.js

@@ -16,2 +16,4 @@ "use strict";
 var log = require('npmlog');
+log.disableProgress();
+
 var EE = require('events').EventEmitter;
@@ -18,0 +20,0 @@ var inherits = require('util').inherits;

lib/util/abi_crosswalk.json

@@ -1210,2 +1210,6 @@ {
   },
+  "4.6.2": {
+    "node_abi": 46,
+    "v8": "4.5"
+  },
   "5.0.0": {
@@ -1346,3 +1350,15 @@ "node_abi": 47,
     "v8": "5.1"
+  },
+  "7.0.0": {
+    "node_abi": 51,
+    "v8": "5.4"
+  },
+  "7.1.0": {
+    "node_abi": 51,
+    "v8": "5.4"
+  },
+  "7.2.0": {
+    "node_abi": 51,
+    "v8": "5.4"
   }
 }

package.json

 {
   "name": "node-pre-gyp",
   "description": "Node.js native addon binary install tool",
-  "version" : "0.6.31",
+  "version" : "0.6.32",
   "keywords": [
@@ -25,5 +25,5 @@ "native",
     "nopt": "~3.0.6",
-    "npmlog": "^4.0.0",
+    "npmlog": "^4.0.1",
     "rc": "~1.1.6",
-    "request": "^2.75.0",
+    "request": "^2.79.0",
     "rimraf": "~2.5.4",
@@ -35,6 +35,6 @@ "semver": "~5.3.0",
   "devDependencies": {
-    "aws-sdk": "2.x",
-    "mocha": "3.x",
-    "retire": "1.2.10",
-    "jshint": "2.x"
+    "aws-sdk": "^2.7.7",
+    "mocha": "^3.2.0",
+    "retire": "^1.2.10",
+    "jshint": "^2.9.4"
   },
@@ -41,0 +41,0 @@ "jshintConfig": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

116619

increased by0.98%

Lines of code

2679

increased by1.4%

Worsened metrics

Number of low supply chain risk alerts

33

increased by3.13%

Dependency changes

• Updatednpmlog@^4.0.1

• Updatedrequest@^2.79.0