@renovatebot/osv-offline 1.5.12 → 1.6.1

package/dist/lib/download.d.ts

@@ -1,2 +1,2 @@
 import { Result } from './types';
-export declare function tryDownloadDb(githubToken?: string): Promise<Result>;
+export declare function tryDownloadDb(): Promise<Result>;

package/dist/lib/download.js

@@ -5,22 +5,14 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.tryDownloadDb = tryDownloadDb;
 const fs_extra_1 = __importDefault(require("fs-extra"));
-const node_fetch_1 = __importDefault(require("node-fetch"));
-const rest_1 = require("@octokit/rest");
 const got_1 = __importDefault(require("got"));
-const stream_1 = require("stream");
-const util_1 = require("util");
+const promises_1 = require("node:stream/promises");
 const osv_offline_db_1 = require("@renovatebot/osv-offline-db");
 const path_1 = __importDefault(require("path"));
 const luxon_1 = require("luxon");
 const adm_zip_1 = __importDefault(require("adm-zip"));
 const types_1 = require("./types");
-const pipeline = (0, util_1.promisify)(stream_1.Stream.pipeline);
-const baseParameters = {
-    owner: 'renovatebot',
-    repo: 'osv-offline',
-};
-async function tryDownloadDb(githubToken) {
+async function tryDownloadDb() {
     await fs_extra_1.default.ensureDir(osv_offline_db_1.OsvOfflineDb.rootDirectory);
     if (process.env['OSV_OFFLINE_DISABLE_DOWNLOAD']?.toLowerCase() === 'true') {
         return (0, types_1.success)();
@@ -30,44 +22,24 @@ async function tryDownloadDb(githubToken) {
     try {
         stats = await fs_extra_1.default.stat(path_1.default.join(osv_offline_db_1.OsvOfflineDb.rootDirectory, `osv-offline.zip`));
     }
-    catch (err) {
+    catch {
         // ignored
     }
     if (stats !== undefined &&
         luxon_1.DateTime.utc().diff(luxon_1.DateTime.fromJSDate(stats.mtime)).as('days') < 1) {
         return (0, types_1.success)();
     }
-    const octokitOptions = {
-        auth: githubToken ?? process.env['GITHUB_COM_TOKEN'],
-        request: { fetch: node_fetch_1.default },
-    };
-    let latestRelease = null;
+    // only download databases if local databases are missing or remote is newer
     try {
-        latestRelease = (await new rest_1.Octokit(octokitOptions).repos.listReleases({
-            ...baseParameters,
-        })).data[0];
+        const stream = got_1.default.stream('https://github.com/renovatebot/osv-offline/releases/latest/download/osv-offline.zip');
+        const zipPath = path_1.default.join(osv_offline_db_1.OsvOfflineDb.rootDirectory, 'osv-offline.zip');
+        const writeStream = fs_extra_1.default.createWriteStream(zipPath);
+        await (0, promises_1.pipeline)(stream, writeStream);
+        const zip = new adm_zip_1.default(zipPath);
+        zip.extractAllTo(osv_offline_db_1.OsvOfflineDb.rootDirectory);
     }
     catch (err) {
         return (0, types_1.failure)(err);
     }
-    const asset = latestRelease?.assets.find((asset) => asset.name === 'osv-offline.zip');
-    // if local database is the same size as remote database, don't download again
-    if (asset?.size === stats?.size) {
-        return (0, types_1.success)();
-    }
-    if (asset !== undefined) {
-        // only download databases if local databases are missing or remote is newer
-        try {
-            const stream = got_1.default.stream(asset.browser_download_url);
-            const zipPath = path_1.default.join(osv_offline_db_1.OsvOfflineDb.rootDirectory, asset.name);
-            const writeStream = fs_extra_1.default.createWriteStream(zipPath);
-            await pipeline(stream, writeStream);
-            const zip = new adm_zip_1.default(zipPath);
-            zip.extractAllTo(osv_offline_db_1.OsvOfflineDb.rootDirectory);
-        }
-        catch (err) {
-            return (0, types_1.failure)(err);
-        }
-    }
     return (0, types_1.success)();
 }

package/dist/lib/osv-offline.d.ts

@@ -10,7 +10,7 @@ export declare class OsvOffline {
      * Asynchronously creates a new instance of {@link OsvOffline}
      * @returns A new instance of {@link OsvOffline}
      */
-    static create(githubToken?: string): Promise<OsvOffline>;
+    static create(): Promise<OsvOffline>;
     /**
      * Query the local database for any package vulnerabilities
      * @param ecosystem The package ecosystem

package/dist/lib/osv-offline.js

@@ -10,8 +10,8 @@ class OsvOffline {
     /**
      * Asynchronous code required as part of class instantiation
      */
-    async initialize(githubToken) {
-        const result = await (0, download_1.tryDownloadDb)(githubToken);
+    async initialize() {
+        const result = await (0, download_1.tryDownloadDb)();
         if (!result.success) {
             throw result.error;
         }
@@ -21,9 +21,9 @@ class OsvOffline {
      * Asynchronously creates a new instance of {@link OsvOffline}
      * @returns A new instance of {@link OsvOffline}
      */
-    static async create(githubToken) {
+    static async create() {
         const instance = new OsvOffline();
-        await instance.initialize(githubToken);
+        await instance.initialize();
         return instance;
     }
     /**

package/package.json

@@ -1,9 +1,10 @@
 {
   "name": "@renovatebot/osv-offline",
-  "version": "1.5.12",
+  "version": "1.6.1",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
   "license": "MIT",
+  "type": "commonjs",
   "publishConfig": {
     "access": "public"
   },
@@ -12,22 +13,18 @@
     "url": "https://github.com/renovatebot/osv-offline.git"
   },
   "dependencies": {
-    "@renovatebot/osv-offline-db": "1.7.0",
-    "@octokit/rest": "^20.1.1",
+    "@renovatebot/osv-offline-db": "1.7.1",
     "adm-zip": "~0.5.16",
     "fs-extra": "^11.3.0",
     "got": "^11.8.6",
-    "luxon": "^3.5.0",
-    "node-fetch": "^2.7.0"
+    "luxon": "^3.5.0"
   },
   "devDependencies": {
     "@types/adm-zip": "0.5.7",
     "@types/fs-extra": "11.0.4",
-    "@types/luxon": "3.4.2",
-    "@types/node": "20.17.11",
-    "@types/node-fetch": "2.6.12",
-    "prettier": "3.4.2",
-    "ts-node": "10.9.2",
-    "typescript": "5.7.3"
+    "@types/luxon": "3.4.2"
+  },
+  "engines": {
+    "node": ">=18.12.0"
   }
 }