Socket
Socket
Sign inDemoInstall

pacote

Package Overview
Dependencies
Maintainers
1
Versions
221
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

pacote - npm Package Compare versions

Comparing version 2.7.22 to 2.7.23

11

CHANGELOG.md

@@ -5,2 +5,13 @@ # Change Log

<a name="2.7.23"></a>
## [2.7.23](https://github.com/zkat/pacote/compare/v2.7.22...v2.7.23) (2017-05-31)
### Bug Fixes
* **git:** fix ls-remote command and throw away ^{} junk ([62ba84d](https://github.com/zkat/pacote/commit/62ba84d))
* **git:** use the parsed git committish from npa ([77a676a](https://github.com/zkat/pacote/commit/77a676a))
<a name="2.7.22"></a>

@@ -7,0 +18,0 @@ ## [2.7.22](https://github.com/zkat/pacote/compare/v2.7.21...v2.7.22) (2017-05-31)

7

lib/fetchers/git.js

@@ -105,3 +105,3 @@ 'use strict'

function plainManifest (repo, spec, opts) {
const rawRef = spec.gitCommittish
const rawRef = spec.gitCommittish || spec.gitRange
return resolve(

@@ -137,4 +137,3 @@ repo, rawRef, spec.name, opts

function resolve (url, rawRef, name, opts) {
const semverMatch = rawRef.match(/^semver:v?(.*)/)
const isSemver = semverMatch && semver.validRange(semverMatch[1])
const isSemver = semver.validRange(rawRef)
return git.revs(url, opts).then(remoteRefs => {

@@ -146,3 +145,3 @@ return isSemver

name: name
}, semverMatch[1], opts)
}, rawRef, opts)
: remoteRefs

@@ -149,0 +148,0 @@ ? BB.resolve(

@@ -108,3 +108,3 @@ 'use strict'

return pinflight(`ls-remote:${repo}`, () => {
return spawnGit(['ls-remote', repo, '-t', '-h', '*'], {
return spawnGit(['ls-remote', repo], {
env: gitEnv()

@@ -121,2 +121,3 @@ }, opts).then(child => {

if (!ref) { return revs } // ???
if (ref.match(/\^\{\}$/)) { return revs } // refs/tags/x^{} crap
const type = refType(line)

@@ -123,0 +124,0 @@ const doc = {sha, ref, type}

{
"name": "pacote",
"version": "2.7.22",
"version": "2.7.23",
"description": "JavaScript package downloader",

@@ -5,0 +5,0 @@ "main": "index.js",

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc