@adaptic/utils 0.0.1036 → 0.0.1037

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.cjs CHANGED
@@ -19764,7 +19764,9 @@ const fetchTrades = async (symbol, options) => {
19764
19764
  await rateLimiters$1.massive.acquire();
19765
19765
  const url = `${baseUrl}?${params.toString()}`;
19766
19766
  try {
19767
- logIfDebug(`Fetching trades for ${symbol} from ${url}`);
19767
+ // Redact the apiKey query param before logging — the raw URL embeds the
19768
+ // live Massive API key (audit #595).
19769
+ logIfDebug(`Fetching trades for ${symbol} from ${url.replace(/([?&](?:apiKey|apikey|api_key)=)[^&]+/gi, "$1***")}`);
19768
19770
  const response = await fetchWithRetry(url, { signal: createTimeoutSignal(DEFAULT_TIMEOUTS.MASSIVE_API) }, 3, 1000);
19769
19771
  const data = (await response.json());
19770
19772
  if ("message" in data) {