npm-registry-fetch - npm Package Compare versions

Comparing version 8.1.4 to 8.1.5

CHANGELOG.md

@@ -5,2 +5,9 @@ # Changelog
 
+### [8.1.5](https://github.com/npm/registry-fetch/compare/v8.1.4...v8.1.5) (2020-10-12)
+
+
+### Bug Fixes
+
+* respect publishConfig.registry when specified ([32e36ef](https://github.com/npm/registry-fetch/commit/32e36efe86302ed319973cd5b1e6ccc3f62e557e)), closes [#35](https://github.com/npm/registry-fetch/issues/35)
+
 ### [8.1.4](https://github.com/npm/registry-fetch/compare/v8.1.3...v8.1.4) (2020-08-17)
@@ -7,0 +14,0 @@

index.js

@@ -32,2 +32,3 @@ 'use strict'
     (opts.spec && pickRegistry(opts.spec, opts)) ||
+    (opts.publishConfig && opts.publishConfig.registry) ||
     opts.registry ||
@@ -159,2 +160,6 @@ /* istanbul ignore next */
 
+  if (!registry && opts.publishConfig) {
+    registry = opts.publishConfig.registry
+  }
+
   if (!registry) {
@@ -161,0 +166,0 @@ registry = opts.registry || 'https://registry.npmjs.org/'

package.json

 {
   "name": "npm-registry-fetch",
-  "version": "8.1.4",
+  "version": "8.1.5",
   "description": "Fetch-based http client for use with npm registry APIs",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

48765

increased by0.96%

Lines of code

469

increased by0.86%

Worsened metrics

Number of medium supply chain risk alerts

2

increased by100%

No dependency changes