npmconf - npm Package Compare versions

Comparing version 2.1.2 to 2.1.3

lib/get-credentials-by-uri.js

 var assert = require("assert")
+var Buffer = require("safe-buffer").Buffer
 
@@ -37,3 +38,3 @@ var toNerfDart = require("./nerf-dart.js")
   if (authDef && !(userDef && passDef)) {
-    authDef = new Buffer(authDef, "base64").toString()
+    authDef = Buffer.from(authDef, "base64").toString()
     authDef = authDef.split(":")
@@ -45,3 +46,3 @@ userDef = authDef.shift()
   if (this.get(nerfed + ":_password")) {
-    c.password = new Buffer(this.get(nerfed + ":_password"), "base64").toString("utf8")
+    c.password = Buffer.from(this.get(nerfed + ":_password"), "base64").toString("utf8")
   } else if (nerfed === defnerf && passDef) {
@@ -71,3 +72,3 @@ c.password = passDef
   if (c.username && c.password) {
-    c.auth = new Buffer(c.username + ":" + c.password).toString("base64")
+    c.auth = Buffer.from(c.username + ":" + c.password).toString("base64")
   }
@@ -74,0 +75,0 @@

lib/set-credentials-by-uri.js

 var assert = require("assert")
+var Buffer = require("safe-buffer").Buffer
 
@@ -27,3 +28,3 @@ var toNerfDart = require("./nerf-dart.js")
 
-    var encoded = new Buffer(c.password, "utf8").toString("base64")
+    var encoded = Buffer.from(c.password, "utf8").toString("base64")
     this.set(nerfed + ":_password", encoded,   "user")
@@ -30,0 +31,0 @@ this.set(nerfed + ":username", c.username, "user")

package.json

 {
   "name": "npmconf",
-  "version": "2.1.2",
-  "description": "The config thing npm uses",
+  "version": "2.1.3",
+  "description": "The config module for npm circa npm@1 and npm@2",
   "main": "npmconf.js",
@@ -17,2 +17,3 @@ "directories": {
     "osenv": "^0.1.0",
+    "safe-buffer": "^5.1.1",
     "semver": "2 || 3 || 4",
@@ -22,3 +23,3 @@ "uid-number": "0.0.5"
   "devDependencies": {
-    "tap": "~0.4.0"
+    "tap": "^1.2.0"
   },
@@ -25,0 +26,0 @@ "scripts": {

README.md

 # npmconf
 
-The config thing npm uses
+## THIS PACKAGE IS DEPRECATED
 
-If you are interested in interacting with the config settings that npm
-uses, then use this module.
+**This package's functionality has been reintegrated directly into npm. There
+have been many changes made to npm's configuration since the last version of
+this package was published. It should not be considered a source of truth for
+npm configuration any longer, and npm itself is the best tool to use to manage
+its configuration.
 
-However, if you are writing a new Node.js program, and want
+# **_Do not use this package._**
+
+If you are writing a new Node.js program, and want
 configuration functionality similar to what npm has, but for your
@@ -13,6 +18,2 @@ own thing, then I'd recommend using [rc](https://github.com/dominictarr/rc),
 
-If I were to do it all over again, that's what I'd do for npm.  But,
-alas, there are many systems depending on many of the particulars of
-npm's configuration setup, so it's not worth the cost of changing.
-
 ## USAGE
@@ -19,0 +20,0 @@

test/00-setup.js

@@ -65,4 +65,4 @@ var path = require('path')
 
-  console.log('0..1')
+  console.log('1..1')
   console.log('ok 1 setup done')
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

52280

increased by0.24%

Lines of code

1560

increased by0.13%

Number of lines in readme file

35

increased by2.94%

Worsened metrics

Dependency count

10

increased by11.11%

Number of package files

26

decreased by-7.14%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedsafe-buffer@^5.1.1

• + Addedsafe-buffer@5.2.1(transitive)