milliways-infosec/AikidoSec-safe-chain
7
0
Fork 0
mirror of https://github.com/AikidoSec/safe-chain.git synced 2026-05-26 12:10:49 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Add skipMinimumPackageAge.

Browse source
This commit is contained in:
Sander Declerck 2025-11-13 15:14:44 +01:00
parent a9a4d76705
commit f64ee3bccf
No known key found for this signature in database
3 changed files with 51 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

3
packages/safe-chain/src/registryProxy/interceptors/npm/npmInterceptor.js
View file

@ -1,3 +1,4 @@
import { skipMinimumPackageAge } from "../../../config/settings.js";
import { isMalwarePackage } from "../../../scanning/audit/index.js";
import { interceptRequests } from "../interceptorBuilder.js";
import {
@ -38,7 +39,7 @@ function buildNpmInterceptor(registry) {
reqContext.blockMalware(packageName, version);
}
if (isPackageInfoUrl(reqContext.targetUrl)) {
if (!skipMinimumPackageAge() && isPackageInfoUrl(reqContext.targetUrl)) {
reqContext.modifyRequestHeaders(modifyNpmInfoRequestHeaders);
reqContext.modifyBody(modifyNpmInfoResponse);
}