renovate/renovate
1
0
Fork 0
mirror of https://github.com/renovatebot/renovate.git synced 2025-01-12 15:06:27 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 7

refactor: warn if localhost registry detected

Browse source
This commit is contained in:
Rhys Arkins 2018-11-16 12:21:48 +01:00
parent db0efdf053
commit 8a8e5c8fed
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
lib/datasource/npm.js
View file

@ -66,6 +66,15 @@ function setNpmrc(input, trustLevel = 'low') {
npmrc = ini.parse(input);
// massage _auth to _authToken
for (const [key, val] of Object.entries(npmrc)) {
// istanbul ignore if
if (
trustLevel === 'low' &&
key.endsWith('registry') &&
val &&
val.includes('localhost')
) {
logger.warn({ key, val }, 'Detected localhost registry');
}
if (key !== '_auth' && key.endsWith('_auth') && isBase64(val)) {
logger.debug('Massaging _auth to _authToken');
npmrc[key + 'Token'] = val;