Socket
Socket
Sign inDemoInstall

pacote

Package Overview
Dependencies
21
Maintainers
2
Versions
220
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

Comparing version 3.0.0 to 4.0.0

15

CHANGELOG.md

@@ -5,2 +5,17 @@ # Change Log

<a name="4.0.0"></a>
# [4.0.0](https://github.com/zkat/pacote/compare/v3.0.0...v4.0.0) (2017-06-29)
### Bug Fixes
* **extract:** revert uid/gid change ([41852e0](https://github.com/zkat/pacote/commit/41852e0))
### BREAKING CHANGES
* **extract:** behavior for setting uid/gid on extracted contents was restored to what it was in pacote@2
<a name="3.0.0"></a>

@@ -7,0 +22,0 @@ # [3.0.0](https://github.com/zkat/pacote/compare/v2.7.38...v3.0.0) (2017-06-29)

13

lib/extract-stream.js

@@ -8,9 +8,2 @@ 'use strict'

let uid
let gid
if (process.platform !== 'win32') {
uid = process.getuid()
gid = process.getgid()
}
module.exports = extractStream

@@ -22,4 +15,6 @@ function extractStream (dest, opts) {

map: (header) => {
if (uid != null) { header.uid = uid }
if (gid != null) { header.gid = gid }
if (process.platform !== 'win32') {
header.uid = opts.uid == null ? header.uid : opts.uid
header.gid = opts.gid == null ? header.gid : opts.gid
}
// Note: This mirrors logic in the fs read operations that are

@@ -26,0 +21,0 @@ // employed during tarball creation, in the fstream-npm module.

{
"name": "pacote",
"version": "3.0.0",
"version": "4.0.0",
"description": "JavaScript package downloader",

@@ -5,0 +5,0 @@ "main": "index.js",

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Packages

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc