ssb-git-repo - npm Package Compare versions

Comparing version 2.6.0 to 2.6.1

lib/repo.js

@@ -309,2 +309,14 @@ var pull = require('pull-stream')
       // complete waiting requests for lookups
+
+      // for dev use: pretend an extra message has been published
+      if (process.env.GITSSB_EXTRA_UPDATE) {
+        this._processOldMsg({
+          key: 'DRAFT',
+          value: {
+            author: this.sbot.id,
+            content: require(process.env.GITSSB_EXTRA_UPDATE)
+          }
+        })
+      }
+
       this.synced = true
@@ -473,3 +485,4 @@ while (this._syncCbs.length)
             var msgId = pack && pack.msgId
-            if (!msgId) return console.error('Missing offset message id', pack)
+            // if (!msgId) throw new Error('Missing offset message id. ' + JSON.stringify(pack, 0, 2))
+            if (!msgId) return
             var msg = self.updates.objects[msgId]
@@ -801,2 +814,10 @@ if (!msg) return console.error('missing message', msgId)
 
+    // include extra repo branches (hack)
+    if (process.env.GITSSB_EXTRA_REPO_BRANCHES) {
+      var extraRepoBranches = process.env.GITSSB_EXTRA_REPO_BRANCHES.split(',')
+      extraRepoBranches.forEach(function (key) {
+        if (repoBranches.indexOf(key) == -1) repoBranches.push(key)
+      })
+    }
+
     // don't need to include repo branches in refs branches
@@ -803,0 +824,0 @@ var refsBranches = []

package.json

 {
   "name": "ssb-git-repo",
-  "version": "2.6.0",
+  "version": "2.6.1",
   "description": "git repos in secure-scuttlebutt",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Lines of code

1409

increased by1.29%

Worsened metrics

Total package byte prevSize

51744

decreased by-22.34%

Number of package files

7

decreased by-12.5%

Number of low supply chain risk alerts

12

increased by71.43%

No dependency changes