npq 2.5.0 → 2.5.2

package/README.md

@@ -100,6 +100,7 @@ Note: `npq` by default will offload all commands and their arguments to the `npm
 | license | Will show a warning if a package has been found without a license field | Checks the latest version for a license
 | expired domains | Will show a warning if a package has been found with one of its maintainers having an email address that includes an expired domain | Checks a dependency version for a maintainer with an expired domain
 | signatures | Will compare the package's signature as it shows on the registry's pakument with the keys published on the npmjs.com registry 
+| provenance | Will verify the package's attestations of provenance metadata for the published package
 
 ### Disabling Marshalls
 

package/__tests__/marshalls.signatures.test.js

@@ -9,6 +9,10 @@ jest.mock('pacote', () => {
   }
 })
 
+jest.mock('node-fetch')
+
+const fetch = require('node-fetch')
+
 const SignaturesMarshall = require('../lib/marshalls/signatures.marshall')
 const pacote = require('pacote')
 
@@ -46,7 +50,7 @@ describe('Signature test suites', () => {
         ]
       })
     }
-    global.fetch = jest.fn().mockResolvedValue(mockResponse)
+    fetch.mockImplementationOnce(() => Promise.resolve(mockResponse))
 
     const testMarshall = new SignaturesMarshall({
       packageRepoUtils: {
@@ -103,7 +107,7 @@ describe('Signature test suites', () => {
         ]
       })
     }
-    global.fetch = jest.fn().mockResolvedValue(mockResponse)
+    fetch.mockImplementationOnce(() => Promise.resolve(mockResponse))
 
     // the manifest() method should throw an error
     // in this jest mock to simulate a problem:

package/lib/marshalls/provenance.marshall.js

@@ -1,6 +1,7 @@
 'use strict'
 
 const BaseMarshall = require('./baseMarshall')
+const fetch = require('node-fetch')
 const pacote = require('pacote')
 
 const MARSHALL_NAME = 'provenance'

package/lib/marshalls/signatures.marshall.js

@@ -1,6 +1,7 @@
 'use strict'
 
 const BaseMarshall = require('./baseMarshall')
+const fetch = require('node-fetch')
 const pacote = require('pacote')
 
 const MARSHALL_NAME = 'signatures'

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "npq",
-  "version": "2.5.0",
+  "version": "2.5.2",
   "description": "marshall your npm/npm package installs with high quality and class 🎖",
   "bin": {
     "npq": "./bin/npq.js",