pacote 13.0.4 → 13.1.0

package/lib/bin.js

@@ -110,7 +110,7 @@ const parseArg = arg => {
   const k = split.shift()
   const v = split.join('=')
   const no = /^no-/.test(k) && !v
-  const key = (no ? k.substr(3) : k)
+  const key = (no ? k.slice(3) : k)
     .replace(/^tag$/, 'defaultTag')
     .replace(/-([a-z])/g, (_, c) => c.toUpperCase())
   const value = v ? v.replace(/^~/, process.env.HOME) : !no

package/lib/fetcher.js

@@ -105,6 +105,9 @@ class FetcherBase {
       this[_readPackageJson] = readPackageJsonFast
     }
 
+    // config values: npmjs (default), never
+    this.replaceRegistryHost = opts.replaceRegistryHost === 'never' ? 'never' : 'npmjs'
+
     this.defaultTag = opts.defaultTag || 'latest'
     this.registry = removeTrailingSlashes(opts.registry || 'https://registry.npmjs.org')
 
@@ -325,18 +328,18 @@ class FetcherBase {
       }
       return this.resolve().then(() => retry(tryAgain =>
         streamHandler(this[_istream](this[_tarballFromResolved]()))
-          .catch(er => {
+          .catch(streamErr => {
           // Most likely data integrity.  A cache ENOENT error is unlikely
           // here, since we're definitely not reading from the cache, but it
           // IS possible that the fetch subsystem accessed the cache, and the
           // entry got blown away or something.  Try one more time to be sure.
-            if (this.isRetriableError(er)) {
+            if (this.isRetriableError(streamErr)) {
               log.warn('tarball', `tarball data for ${
               this.spec
             } (${this.integrity}) seems to be corrupted. Trying again.`)
-              return this.cleanupCached().then(() => tryAgain(er))
+              return this.cleanupCached().then(() => tryAgain(streamErr))
             }
-            throw er
+            throw streamErr
           }), { retries: 1, minTimeout: 0, maxTimeout: 0 }))
     }
 

package/lib/remote.js

@@ -13,7 +13,9 @@ class RemoteFetcher extends Fetcher {
   constructor (spec, opts) {
     super(spec, opts)
     this.resolved = this.spec.fetchSpec
-    if (magic.test(this.resolved) && !magic.test(this.registry + '/')) {
+    if (this.replaceRegistryHost === 'npmjs'
+      && magic.test(this.resolved)
+      && !magic.test(this.registry + '/')) {
       this.resolved = this.resolved.replace(magic, this.registry + '/')
     }
 

package/lib/util/trailing-slashes.js

@@ -2,7 +2,7 @@ const removeTrailingSlashes = (input) => {
   // in order to avoid regexp redos detection
   let output = input
   while (output.endsWith('/')) {
-    output = output.substr(0, output.length - 1)
+    output = output.slice(0, -1)
   }
   return output
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pacote",
-  "version": "13.0.4",
+  "version": "13.1.0",
   "description": "JavaScript package downloader",
   "author": "GitHub Inc.",
   "bin": {
@@ -14,25 +14,28 @@
     "preversion": "npm test",
     "postversion": "npm publish",
     "prepublishOnly": "git push origin --follow-tags",
-    "lint": "eslint '**/*.js'",
-    "postlint": "npm-template-check",
+    "lint": "eslint \"**/*.js\"",
+    "postlint": "template-oss-check",
     "lintfix": "npm run lint -- --fix",
     "posttest": "npm run lint",
-    "template-copy": "npm-template-copy --force"
+    "template-oss-apply": "template-oss-apply --force"
   },
   "tap": {
     "timeout": 300,
     "coverage-map": "map.js"
   },
   "devDependencies": {
-    "@npmcli/template-oss": "^2.9.2",
+    "@npmcli/eslint-config": "^3.0.1",
+    "@npmcli/template-oss": "3.2.2",
+    "hosted-git-info": "^5.0.0",
     "mutate-fs": "^2.1.1",
+    "nock": "^13.2.4",
     "npm-registry-mock": "^1.3.1",
-    "tap": "^15.1.6"
+    "tap": "^16.0.1"
   },
   "files": [
-    "bin",
-    "lib"
+    "bin/",
+    "lib/"
   ],
   "keywords": [
     "packages",
@@ -42,7 +45,7 @@
   "dependencies": {
     "@npmcli/git": "^3.0.0",
     "@npmcli/installed-package-contents": "^1.0.7",
-    "@npmcli/promise-spawn": "^1.2.0",
+    "@npmcli/promise-spawn": "^3.0.0",
     "@npmcli/run-script": "^3.0.1",
     "cacache": "^16.0.0",
     "chownr": "^2.0.0",
@@ -56,18 +59,22 @@
     "npm-registry-fetch": "^13.0.1",
     "proc-log": "^2.0.0",
     "promise-retry": "^2.0.1",
-    "read-package-json": "^4.1.2",
+    "read-package-json": "^5.0.0",
     "read-package-json-fast": "^2.0.3",
     "rimraf": "^3.0.2",
-    "ssri": "^8.0.1",
+    "ssri": "^9.0.0",
     "tar": "^6.1.11"
   },
   "engines": {
-    "node": "^12.13.0 || ^14.15.0 || >=16"
+    "node": "^12.13.0 || ^14.15.0 || >=16.0.0"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/npm/pacote.git"
   },
-  "repository": "git@github.com:npm/pacote",
   "templateOSS": {
-    "version": "2.9.2",
+    "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
+    "version": "3.2.2",
     "windowsCI": false
   }
 }