node-vault - npm Package Compare versions

Comparing version 0.5.6 to 0.5.7

dist/index.js

@@ -18,3 +18,8 @@ 'use strict';
   mustache = config.mustache || mustache;
-  rp = config['request-promise'] || rp;
+  rp = (config['request-promise'] || rp).defaults({
+    json: true,
+    resolveWithFullResponse: true,
+    simple: false,
+    strictSSL: !process.env.VAULT_SKIP_VERIFY
+  });
   Promise = config.Promise || Promise;
@@ -38,3 +43,2 @@ var client = {};
       var error = new Error(message);
-      error.response = response;
       return Promise.reject(error);
@@ -81,5 +85,2 @@ }
     options.uri = uri;
-    options.json = options.json || true;
-    options.simple = options.simple || false;
-    options.resolveWithFullResponse = options.resolveWithFullResponse || true;
     debug(options.method, uri);
@@ -86,0 +87,0 @@ // debug(options.json);

package.json

 {
   "name": "node-vault",
-  "version": "0.5.6",
+  "version": "0.5.7",
   "description": "Javascript client for HashiCorp's Vault",
@@ -36,3 +36,3 @@ "main": "./dist/index.js",
     "eslint-plugin-import": "^1.11.1",
-    "eslint-plugin-jsx-a11y": "2.2.1",
+    "eslint-plugin-jsx-a11y": "1.2.0",
     "eslint-plugin-react": "^5.2.2",
@@ -39,0 +39,0 @@ "gulp": "^3.9.1",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Lines of code

1016

increased by0.1%

Worsened metrics

Total package byte prevSize

29357

decreased by-0.22%

Number of low supply chain risk alerts

3

increased by50%

No dependency changes