Socket
Socket
Sign inDemoInstall

pacote

Package Overview
Dependencies
21
Maintainers
2
Versions
220
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 2.7.38 to 3.0.0

17

CHANGELOG.md

@@ -5,2 +5,19 @@ # Change Log

<a name="3.0.0"></a>
# [3.0.0](https://github.com/zkat/pacote/compare/v2.7.38...v3.0.0) (2017-06-29)
### Bug Fixes
* **extract:** always extract as current user gid/uid ([6fc01a5](https://github.com/zkat/pacote/commit/6fc01a5))
### BREAKING CHANGES
* **extract:** pacote will no longer set ownership of extracted
contents -- uid/gid will *only* be used for the cache and other internal
details.
<a name="2.7.38"></a>

@@ -7,0 +24,0 @@ ## [2.7.38](https://github.com/zkat/pacote/compare/v2.7.37...v2.7.38) (2017-06-29)

13

lib/extract-stream.js

@@ -8,2 +8,9 @@ 'use strict'

let uid
let gid
if (process.platform !== 'win32') {
uid = process.getuid()
gid = process.getgid()
}
module.exports = extractStream

@@ -15,6 +22,4 @@ function extractStream (dest, opts) {

map: (header) => {
if (process.platform !== 'win32') {
header.uid = opts.uid == null ? header.uid : opts.uid
header.gid = opts.gid == null ? header.gid : opts.gid
}
if (uid != null) { header.uid = uid }
if (gid != null) { header.gid = gid }
// Note: This mirrors logic in the fs read operations that are

@@ -21,0 +26,0 @@ // employed during tarball creation, in the fstream-npm module.

{
"name": "pacote",
"version": "2.7.38",
"version": "3.0.0",
"description": "JavaScript package downloader",

@@ -5,0 +5,0 @@ "main": "index.js",

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Packages

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc