Socket
Socket
Sign inDemoInstall

pacote

Package Overview
Dependencies
Maintainers
1
Versions
221
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

pacote - npm Package Compare versions

Comparing version 2.7.27 to 2.7.28

13

CHANGELOG.md

@@ -5,2 +5,15 @@ # Change Log

<a name="2.7.28"></a>
## [2.7.28](https://github.com/zkat/pacote/compare/v2.7.27...v2.7.28) (2017-06-05)
### Bug Fixes
* **git:** limit ls-remote output to heads/tags (#97) ([c1e3dcd](https://github.com/zkat/pacote/commit/c1e3dcd))
* **proxy:** send certificate authority, key and other options (#95) ([c4b6128](https://github.com/zkat/pacote/commit/c4b6128))
* **registry:** add support for global auth and _auth token (#96) ([7919fb7](https://github.com/zkat/pacote/commit/7919fb7))
* **registry:** emit npm-session header (#98) ([9816b18](https://github.com/zkat/pacote/commit/9816b18))
<a name="2.7.27"></a>

@@ -7,0 +20,0 @@ ## [2.7.27](https://github.com/zkat/pacote/compare/v2.7.26...v2.7.27) (2017-06-01)

13

lib/fetchers/registry/fetch.js

@@ -19,4 +19,8 @@ 'use strict'

cacheManager: opts.cache,
ca: opts.ca,
certfile: opts.certfile,
headers: getHeaders(uri, registry, opts),
integrity: opts.integrity,
key: opts.key,
localAddress: opts.localAddress,
memoize: opts.memoize,

@@ -28,2 +32,3 @@ noProxy: opts.noProxy,

retry: opts.retry,
strictSSL: !!opts.strictSSL,
timeout: opts.timeout,

@@ -79,9 +84,11 @@ uid: opts.uid,

'npm-scope': opts.projectScope,
'npm-session': opts.npmSession,
'user-agent': opts.userAgent,
'referer': opts.refer
}, opts.headers)
const auth = (
// check for auth settings specific to this registry
let auth = (
opts.auth &&
opts.auth[registryKey(registry)]
)
) || opts.auth
// If a tarball is hosted on a different place than the manifest, only send

@@ -100,4 +107,6 @@ // credentials on `alwaysAuth`

headers.authorization = `Basic ${encoded}`
} else if (shouldAuth && auth._auth) {
headers.authorization = `Basic ${auth._auth}`
}
return headers
}

2

lib/util/git.js

@@ -108,3 +108,3 @@ 'use strict'

return pinflight(`ls-remote:${repo}`, () => {
return spawnGit(['ls-remote', repo], {
return spawnGit(['ls-remote', '-h', '-t', repo], {
env: gitEnv()

@@ -111,0 +111,0 @@ }, opts).then(child => {

@@ -15,3 +15,7 @@ 'use strict'

this.cache = opts.cache
this.ca = opts.ca
this.certfile = opts.certfile
this.integrity = opts.integrity
this.key = opts.key
this.localAddress = opts.localAddress
this.log = opts.log || silentlog

@@ -30,2 +34,3 @@ this.memoize = opts.memoize

this.preferOnline = opts.preferOnline
this.strictSSL = !!opts.strictSSL
this.isFromCI = !!(

@@ -38,2 +43,3 @@ opts.isFromCI ||

)
this.npmSession = opts.npmSession
this.refer = opts.referer || opts.refer

@@ -40,0 +46,0 @@ this.projectScope = opts.projectScope

{
"name": "pacote",
"version": "2.7.27",
"version": "2.7.28",
"description": "JavaScript package downloader",

@@ -45,3 +45,3 @@ "main": "index.js",

"bluebird": "^3.5.0",
"cacache": "^9.2.6",
"cacache": "^9.2.7",
"glob": "^7.1.2",

@@ -53,3 +53,3 @@ "lru-cache": "^4.0.2",

"normalize-package-data": "^2.3.6",
"npm-package-arg": "^5.0.0",
"npm-package-arg": "^5.1.1",
"npm-pick-manifest": "^1.0.3",

@@ -60,3 +60,3 @@ "osenv": "^0.1.4",

"protoduck": "^4.0.0",
"safe-buffer": "^5.0.1",
"safe-buffer": "^5.1.0",
"semver": "^5.3.0",

@@ -73,3 +73,3 @@ "ssri": "^4.1.4",

"npmlog": "^4.1.0",
"nyc": "^10.3.2",
"nyc": "^11.0.2",
"require-inject": "^1.4.0",

@@ -80,3 +80,3 @@ "rimraf": "^2.5.4",

"tacks": "^1.2.6",
"tap": "^10.2.0",
"tap": "^10.3.3",
"weallbehave": "^1.2.0",

@@ -83,0 +83,0 @@ "weallcontribute": "^1.0.7"

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc