Socket
Socket
Sign inDemoInstall

pacote

Package Overview
Dependencies
Maintainers
1
Versions
221
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

pacote - npm Package Compare versions

Comparing version 2.6.0 to 2.7.0

15

CHANGELOG.md

@@ -5,2 +5,17 @@ # Change Log

<a name="2.7.0"></a>
# [2.7.0](https://github.com/zkat/pacote/compare/v2.6.0...v2.7.0) (2017-04-29)
### Bug Fixes
* **registry:** stop using integrity hashes for metadata. again. ([4595ab2](https://github.com/zkat/pacote/commit/4595ab2))
### Features
* **manifest:** include _shasum for legacy compat ([b3a7eed](https://github.com/zkat/pacote/commit/b3a7eed))
<a name="2.6.0"></a>

@@ -7,0 +22,0 @@ # [2.6.0](https://github.com/zkat/pacote/compare/v2.5.0...v2.6.0) (2017-04-29)

6

lib/fetchers/registry/manifest.js

@@ -87,3 +87,6 @@ 'use strict'

spec
}, opts)).then(res => res.json().then(packument => {
}, opts, {
// Force integrity to null: we never check integrity hashes for manifests
integrity: null
})).then(res => res.json().then(packument => {
packument._cached = res.headers.has('x-local-cache')

@@ -125,2 +128,3 @@ packument._contentLength = +res.headers.get('content-length')

manifest._integrity = manifest.dist && manifest.dist.integrity
manifest._shasum = shasum
if (!manifest._integrity && shasum) {

@@ -127,0 +131,0 @@ // Use legacy dist.shasum field if available.

@@ -102,2 +102,3 @@ 'use strict'

this._integrity = pkg._integrity || fromTarball._integrity
this._shasum = pkg._shasum
this._shrinkwrap = pkg._shrinkwrap || fromTarball._shrinkwrap || null

@@ -104,0 +105,0 @@ this.bin = pkg.bin || fromTarball.bin || null

2

package.json
{
"name": "pacote",
"version": "2.6.0",
"version": "2.7.0",
"description": "JavaScript package downloader",

@@ -5,0 +5,0 @@ "main": "index.js",

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc