vault-cli - npm Package Compare versions

Comparing version 0.0.11 to 0.0.12

package.json

 {
   "name": "vault-cli",
-  "version": "0.0.11",
+  "version": "0.0.12",
   "description": "CLI for HashiCorp's Vault",
@@ -5,0 +5,0 @@ "author": "Michael Herman",

src/_helpers.js

@@ -16,4 +16,4 @@ 'use strict';
 function authenticate() {
-  return new Promise((resolve, reject) => {
-    if (VAULT_AUTH_METHOD === 'github') {
+  if (VAULT_AUTH_METHOD === 'github') {
+    return new Promise((resolve, reject) => {
       return request({
@@ -27,13 +27,8 @@ method: 'POST',
       .catch((err) => { reject(err); });
-    } else if (VAULT_AUTH_METHOD === 'token') {
-      return request({
-        method: 'POST',
-        uri: `${VAULT_ADDR}/v1/auth/token/lookup`,
-        body: { token: VAULT_AUTH_TOKEN },
-        json: true
-      })
-      .then((res) => { resolve(VAULT_AUTH_TOKEN); })
-      .catch((err) => { reject(err); });
-    }
-  });
+    });
+  } else if (VAULT_AUTH_METHOD === 'token') {
+    return new Promise((resolve, reject) => {
+      resolve(VAULT_AUTH_TOKEN);
+    });
+  }
 }
@@ -40,0 +35,0 @@

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

9688

-1.8%

Lines of code

181

-2.69%

Number of lines in readme file

1

-98.39%

No dependency changes