tiged - npm Package Compare versions

Comparing version 2.12.6 to 2.12.7

package.json

 {
 	"name": "tiged",
-	"version": "2.12.6",
+	"version": "2.12.7",
 	"engines": {
@@ -5,0 +5,0 @@ "node": ">=8.0.0"

src/index.js

@@ -42,5 +42,6 @@ const fs = require('fs-extra');
 		this.verbose = opts.verbose;
-		this.proxy = process.env.https_proxy; // TODO allow setting via --proxy
+		this.proxy = this._getHttpsProxy(); // TODO allow setting via --proxy
 		this.subgroup = opts.subgroup;
 		this.subdir = opts['sub-directory'];
+
 		this.repo = parse(src);
@@ -100,2 +101,14 @@ if (this.subgroup) {
 
+	// Return the HTTPS proxy address. Try to get the value by environment
+	// variable `https_proxy` or `HTTPS_PROXY`.
+	//
+	// TODO allow setting via --proxy
+	_getHttpsProxy() {
+		let result = process.env.https_proxy;
+		if (!result) {
+			result = process.env.HTTPS_PROXY;
+		}
+		return result
+	}
+
 	async _getDirectives(dest) {
@@ -102,0 +115,0 @@ const directivesPath = path.resolve(dest, degitConfigName);

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

31738

increased by0.93%

Lines of code

725

increased by1.54%

Worsened metrics

Number of low supply chain risk alerts

7

increased by16.67%

No dependency changes