npm-registry-fetch
Advanced tools
Comparing version 4.0.1 to 4.0.2
@@ -5,2 +5,13 @@ # Change Log | ||
<a name="4.0.2"></a> | ||
## [4.0.2](https://github.com/npm/registry-fetch/compare/v4.0.0...v4.0.2) (2019-10-04) | ||
### Bug Fixes | ||
* Add null check on body on 401 errors ([e3a0186](https://github.com/npm/registry-fetch/commit/e3a0186)), closes [#9](https://github.com/npm/registry-fetch/issues/9) | ||
* **deps:** Add explicit dependency on safe-buffer ([8eae5f0](https://github.com/npm/registry-fetch/commit/8eae5f0)), closes [npm/libnpmaccess#2](https://github.com/npm/libnpmaccess/issues/2) [#3](https://github.com/npm/registry-fetch/issues/3) | ||
<a name="4.0.0"></a> | ||
@@ -7,0 +18,0 @@ # [4.0.0](https://github.com/npm/registry-fetch/compare/v3.9.1...v4.0.0) (2019-07-15) |
@@ -98,3 +98,3 @@ 'use strict' | ||
} | ||
} else if (res.status === 401 && /one-time pass/.test(body.toString('utf8'))) { | ||
} else if (res.status === 401 && body != null && /one-time pass/.test(body.toString('utf8'))) { | ||
// Heuristic for malformed OTP responses that don't include the www-authenticate header. | ||
@@ -101,0 +101,0 @@ throw new errors.HttpErrorAuthOTP( |
{ | ||
"name": "npm-registry-fetch", | ||
"version": "4.0.1", | ||
"version": "4.0.2", | ||
"description": "Fetch-based http client for use with npm registry APIs", | ||
@@ -5,0 +5,0 @@ "main": "index.js", |
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
License Policy Violation
LicenseThis package is not allowed per your license policy. Review the package's license to ensure compliance.
Found 1 instance in 1 package
New author
Supply chain riskA new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.
Found 1 instance in 1 package
43133
1