bundler-integrity 1.0.6 → 1.0.9

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4fd843d6b07239f0bae53bd215e4ab4e746d7431a6e91a7b980f60a11a98a973
-  data.tar.gz: 3526ff1ff2f66ca1706c5fe1cff1e36f2d8dc8c625f329b173946681d00b986d
+  metadata.gz: 836849df2fe80a5ccd42eba6681d4afd49dbff2eefa401638b0c024f8edb76e2
+  data.tar.gz: c77e5afe962de2edbee1d27bfe065ef9b227647fc5ca31b58dd988118ce3d475
 SHA512:
-  metadata.gz: d5c31e164a25119cd9cab0221b24289854b5b4ade69cbe52872745b2dc0e30c6f3806ac205102ed2ffdb35b6701f2326649d1c4f91f2e327b4253687234b9c69
-  data.tar.gz: '09672e79a915eb5c6008dd69d26000954ba4fe8c62c70a8289cc3a7bdc6ed9ce4ff1916c6749a6c25a53a143b5257d98062742dfb387751f5abab20a8c0ede11'
+  metadata.gz: 4e6c5c4b0e723a0077da13f61f8f34922ec4bb7350e47f7138fd2f0a76a7fac76724b2f3393cd6b6c15eecc7db5e7968abf95aaac8a7523ae20de7c2dd9ca3bc
+  data.tar.gz: 005bb51cefb32508dc56ccd9a1c94b5d51cacf5b9375ec12b4971fdd056ccb90aa454375b2773c2c27d36b5fe5404bb098b2fa851c925c5798b1670aa71031f9

data/bin/bundler-integrity

@@ -39,10 +39,16 @@ deps.specs.each do |spec|
     "#{spec.name}-#{spec.version}-#{spec.platform}.gem"
   end
 
-  details = URI.parse("https://rubygems.org/#{intel_path}").read
+  details = ''
+
+  begin
+    details = URI.parse("https://rubygems.org/#{intel_path}").read
+  rescue OpenURI::HTTPError => e
+    raise e unless e.message.include?('404')
+  end
 
   if details.empty?
-    puts "\033[0;33m[WARN]\033[0m #{full_name} was not found in RubyGems. Maybe external source?"
+    puts "\033[0;33m[WARN]\033[0m #{full_name} was not found in RubyGems. Maybe external source or private gem?"
     next
   end
 
@@ -51,7 +57,10 @@ deps.specs.each do |spec|
       version.fetch('platform') == spec.platform.to_s
   end
 
-  version || raise("#{full_name} not found in the RubyGems API response")
+  unless version
+    puts "\033[0;33m[WARN]\033[0m  #{full_name} version not found in the RubyGems. Maybe yanked or private with a RubyGems placeholder?"
+    next
+  end
 
   if PRINT_EXPORT
     puts "#{version.fetch('sha')} #{full_name}"
@@ -61,7 +70,7 @@ deps.specs.each do |spec|
       .select { |path| File.exist?(path) }
 
     if candidates.empty?
-      puts "\033[0;33m[WARN]\033[0m #{full_name} was not found in cache locations, maybe it is a stdlib gem?"
+      puts "\033[0;33m[WARN]\033[0m #{full_name} was not found in cache locations. Maybe it is a stdlib gem?"
       next
     end
 
@@ -84,8 +93,10 @@ deps.specs.each do |spec|
         exit 1
       end
     end
-
-    puts "\033[0;32m[OK]\033[0m Congratulations, you're safe and sound!"
-    puts "\033[0;32m[OK]\033[0m Maciej Mensfeld and the WhiteSource team wishes you a good day!"
   end
 end
+
+unless PRINT_EXPORT
+  puts "\033[0;32m[OK]\033[0m Congratulations, you're safe and sound!"
+  puts "\033[0;32m[OK]\033[0m Maciej Mensfeld and the WhiteSource team wishes you a good day!"
+end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: bundler-integrity
 version: !ruby/object:Gem::Version
-  version: 1.0.6
+  version: 1.0.9
 platform: ruby
 authors:
 - Maciej Mensfeld
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-05-11 00:00:00.000000000 Z
+date: 2022-05-12 00:00:00.000000000 Z
 dependencies: []
 description: "Gem to verify integrity of packages installed via Bundler.\n\n  It allows
   to detect packages that were tampered with or replaced via cache poison or replaced.\n\n