From 9621e95b869fcf0eae9588c115817e42cdf9ceda Mon Sep 17 00:00:00 2001 From: Uzair Sajid Date: Thu, 28 Jun 2018 18:08:57 +0500 Subject: [PATCH] update tar package because of security vulnerbility https://nodesecurity.io/advisories/57 --- index.js | 2 +- package.json | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/index.js b/index.js index aa580d1..cf3e4a1 100644 --- a/index.js +++ b/index.js @@ -49,7 +49,7 @@ module.exports = function(options, callback) { // Read in the downloaded tarfile fs.createReadStream(gitOptions.output) // Explode the downloaded tarfile - .pipe(tar.Extract({ path: options.dest })) + .pipe(tar.extract({ cwd: options.dest })) // Handle extraction errors .on('error', function (er) { callback && callback(er); diff --git a/package.json b/package.json index 78a675b..47968cf 100644 --- a/package.json +++ b/package.json @@ -1,11 +1,11 @@ { "name": "git-download", - "version": "0.0.2", + "version": "0.0.3", "description": "Download a remote git repository as a tar file or exploded directory", "main": "index.js", "dependencies": { "git-wrapper": "^0.1.1", - "tar": "^1.0.0", + "tar": "^4.4.0", "uuid": "^1.4.1" }, "devDependencies": {},