milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Parse npm registry's timestamps.

Browse source
This commit is contained in:
Sander Declerck 2025-11-24 15:52:17 +01:00
parent ea75179143
commit 900bf8e6ea
No known key found for this signature in database
1 changed files with 3 additions and 9 deletions
Download patch file Download diff file Expand all files Collapse all files

12
packages/safe-chain/src/registryProxy/interceptors/npm/modifyNpmInfo.js
View file

@ -67,7 +67,7 @@ export function modifyNpmInfoResponse(body, headers) {
const cutOff = new Date(
new Date().getTime() - getMinimumPackageAgeHours() * 3600 * 1000
).toISOString();
);
const hasLatestTag = !!bodyJson["dist-tags"]["latest"];
@ -79,13 +79,8 @@ export function modifyNpmInfoResponse(body, headers) {
.filter((x) => x.version !== "created" && x.version !== "modified");
for (const { version, timestamp } of versions) {
if (version === "created" || version === "modified") {
continue;
}
// Timestamps are compared as strings.
// This can be done because they are formatted in ISO8601, which is sortable.
if (timestamp > cutOff) {
const timestampValue = new Date(timestamp);
if (timestampValue > cutOff) {
deleteVersionFromJson(bodyJson, version);
if (headers) {
// When modifying the response, the etag and last-modified headers
@ -93,7 +88,6 @@ export function modifyNpmInfoResponse(body, headers) {
delete headers["etag"];
delete headers["last-modified"];
}
continue;
}
}