@pnpm/fetching.tarball-fetcher 1101.0.0 → 1101.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -3
- package/lib/gitHostedTarballFetcher.js +4 -1
- package/package.json +15 -15
package/README.md
CHANGED
|
@@ -1,13 +1,13 @@
|
|
|
1
|
-
# @pnpm/tarball-fetcher
|
|
1
|
+
# @pnpm/fetching.tarball-fetcher
|
|
2
2
|
|
|
3
3
|
> Fetcher for packages hosted as tarballs
|
|
4
4
|
|
|
5
|
-
[](https://
|
|
5
|
+
[](https://npmx.dev/package/@pnpm/fetching.tarball-fetcher)
|
|
6
6
|
|
|
7
7
|
## Installation
|
|
8
8
|
|
|
9
9
|
```
|
|
10
|
-
pnpm add @pnpm/tarball-fetcher
|
|
10
|
+
pnpm add @pnpm/fetching.tarball-fetcher
|
|
11
11
|
```
|
|
12
12
|
|
|
13
13
|
## License
|
|
@@ -7,7 +7,7 @@ import { addFilesFromDir } from '@pnpm/worker';
|
|
|
7
7
|
export function createGitHostedTarballFetcher(fetchRemoteTarball, fetcherOpts) {
|
|
8
8
|
const fetch = async (cafs, resolution, opts) => {
|
|
9
9
|
const rawFilesIndexFile = `${opts.filesIndexFile}\traw`;
|
|
10
|
-
const { filesMap, manifest, requiresBuild } = await fetchRemoteTarball(cafs, resolution, {
|
|
10
|
+
const { filesMap, manifest, requiresBuild, integrity } = await fetchRemoteTarball(cafs, resolution, {
|
|
11
11
|
...opts,
|
|
12
12
|
filesIndexFile: rawFilesIndexFile,
|
|
13
13
|
});
|
|
@@ -23,6 +23,9 @@ export function createGitHostedTarballFetcher(fetchRemoteTarball, fetcherOpts) {
|
|
|
23
23
|
filesMap: prepareResult.filesMap,
|
|
24
24
|
manifest: prepareResult.manifest ?? manifest,
|
|
25
25
|
requiresBuild,
|
|
26
|
+
// Propagate the raw tarball integrity so the lockfile pins it and
|
|
27
|
+
// future installs detect a tampered tarball from the git host.
|
|
28
|
+
integrity,
|
|
26
29
|
};
|
|
27
30
|
}
|
|
28
31
|
catch (err) {
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@pnpm/fetching.tarball-fetcher",
|
|
3
|
-
"version": "1101.0.
|
|
3
|
+
"version": "1101.0.2",
|
|
4
4
|
"description": "Fetcher for packages hosted as tarballs",
|
|
5
5
|
"keywords": [
|
|
6
6
|
"pnpm",
|
|
@@ -30,19 +30,19 @@
|
|
|
30
30
|
"lodash.throttle": "4.1.1",
|
|
31
31
|
"p-map-values": "^0.1.0",
|
|
32
32
|
"ramda": "npm:@pnpm/ramda@0.28.1",
|
|
33
|
-
"@pnpm/core-loggers": "1100.0.1",
|
|
34
33
|
"@pnpm/error": "1100.0.0",
|
|
35
|
-
"@pnpm/
|
|
36
|
-
"@pnpm/
|
|
37
|
-
"@pnpm/fetching.types": "1100.0.
|
|
38
|
-
"@pnpm/fs.graceful-fs": "1100.0.0",
|
|
34
|
+
"@pnpm/core-loggers": "1100.0.1",
|
|
35
|
+
"@pnpm/fs.graceful-fs": "1100.1.0",
|
|
36
|
+
"@pnpm/fetching.types": "1100.0.1",
|
|
39
37
|
"@pnpm/fs.packlist": "1100.0.0",
|
|
40
38
|
"@pnpm/store.index": "1100.0.0",
|
|
41
|
-
"@pnpm/types": "1101.0.0"
|
|
39
|
+
"@pnpm/types": "1101.0.0",
|
|
40
|
+
"@pnpm/exec.prepare-package": "1100.0.6",
|
|
41
|
+
"@pnpm/fetching.fetcher-base": "1100.1.2"
|
|
42
42
|
},
|
|
43
43
|
"peerDependencies": {
|
|
44
|
-
"@pnpm/logger": "
|
|
45
|
-
"@pnpm/worker": "^1100.1.
|
|
44
|
+
"@pnpm/logger": "^1001.0.1",
|
|
45
|
+
"@pnpm/worker": "^1100.1.2"
|
|
46
46
|
},
|
|
47
47
|
"devDependencies": {
|
|
48
48
|
"@jest/globals": "30.3.0",
|
|
@@ -53,14 +53,14 @@
|
|
|
53
53
|
"@types/ssri": "^7.1.5",
|
|
54
54
|
"ssri": "13.0.1",
|
|
55
55
|
"tempy": "3.0.0",
|
|
56
|
-
"undici": "^7.
|
|
57
|
-
"@pnpm/fetching.tarball-fetcher": "1101.0.0",
|
|
56
|
+
"undici": "^7.25.0",
|
|
58
57
|
"@pnpm/logger": "1100.0.0",
|
|
59
|
-
"@pnpm/
|
|
60
|
-
"@pnpm/store.
|
|
61
|
-
"@pnpm/
|
|
58
|
+
"@pnpm/network.fetch": "1100.0.2",
|
|
59
|
+
"@pnpm/store.cafs-types": "1100.0.1",
|
|
60
|
+
"@pnpm/store.create-cafs-store": "1100.0.5",
|
|
61
|
+
"@pnpm/test-fixtures": "1100.0.0",
|
|
62
62
|
"@pnpm/types": "1101.0.0",
|
|
63
|
-
"@pnpm/
|
|
63
|
+
"@pnpm/fetching.tarball-fetcher": "1101.0.2"
|
|
64
64
|
},
|
|
65
65
|
"engines": {
|
|
66
66
|
"node": ">=22.13"
|