milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Make sure rejected promise is not cached in malware list / new packages cache

Browse source
This commit is contained in:
Sander Declerck 2026-04-21 09:31:26 +02:00
parent 2930894624
commit 9fae225277
No known key found for this signature in database
2 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
packages/safe-chain/src/scanning/malwareDatabase.js
View file

@ -65,11 +65,14 @@ export function openMalwareDatabase() {
return {
getPackageStatus,
isMalware: (name, version) => {
isMalware: (/** @type {string} */ name, /** @type {string} */ version) => {
const status = getPackageStatus(name, version);
return isMalwareStatus(status);
},
};
}).catch((error) => {
cachedMalwareDatabasePromise = null;
throw error;
});
}
return cachedMalwareDatabasePromise;

1
packages/safe-chain/src/scanning/newPackagesListCache.js
View file

@ -32,6 +32,7 @@ export function openNewPackagesDatabase() {
.then((newPackagesList) => buildNewPackagesDatabase(newPackagesList))
.catch((/** @type {any} */ error) => {
warnOnceAboutUnavailableDatabase(error);
cachedNewPackagesDatabasePromise = null;
return { isNewlyReleasedPackage: () => false };
});
}