milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Some cleanups

Browse source
This commit is contained in:
Reinier Criel 2026-03-27 10:35:41 -07:00
parent e9db22eb50
commit edf6a1694f
4 changed files with 14 additions and 164 deletions
Download patch file Download diff file Expand all files Collapse all files

4
packages/safe-chain/src/api/aikido.js
View file

@ -12,8 +12,8 @@ const malwareDatabaseUrls = {
};
const newPackagesListUrls = {
[ECOSYSTEM_JS]: "https://malware-list.aikido.dev/releases_npm.json",
[ECOSYSTEM_PY]: "https://malware-list.aikido.dev/releases_pypi.json",
[ECOSYSTEM_JS]: "https://malware-list.aikido.dev/releases/npm.json",
[ECOSYSTEM_PY]: "https://malware-list.aikido.dev/releases/pypi.json",
};
const DEFAULT_FETCH_RETRY_ATTEMPTS = 4;

11
packages/safe-chain/src/api/aikido.spec.js
View file

@ -156,6 +156,10 @@ describe("aikido API", async () => {
const result = await fetchNewPackagesList();
assert.strictEqual(mockFetch.mock.calls.length, 1);
assert.strictEqual(
mockFetch.mock.calls[0].arguments[0],
"https://malware-list.aikido.dev/releases/npm.json"
);
assert.deepStrictEqual(result.newPackagesList, releases);
assert.strictEqual(result.version, '"etag-new-packages"');
});
@ -193,6 +197,13 @@ describe("aikido API", async () => {
const result = await fetchNewPackagesListVersion();
assert.strictEqual(mockFetch.mock.calls.length, 1);
assert.strictEqual(
mockFetch.mock.calls[0].arguments[0],
"https://malware-list.aikido.dev/releases/npm.json"
);
assert.deepStrictEqual(mockFetch.mock.calls[0].arguments[1], {
method: "HEAD",
});
assert.strictEqual(result, '"new-packages-etag"');
});

2
packages/safe-chain/src/registryProxy/interceptors/npm/npmInterceptor.js
View file

@ -73,7 +73,7 @@ function buildNpmInterceptor(registry) {
reqContext.blockMinimumAgeRequest(
packageName,
version,
`Forbidden - blocked by safe-chain minimum package age (${packageName}@${version})`
`Forbidden - blocked by safe-chain direct download minimum package age (${packageName}@${version})`
);
}
}