Skip to content
This repository was archived by the owner on Oct 13, 2026. It is now read-only.

v0.4.1

Choose a tag to compare

View all tags
@mborne mborne released this 13 Oct 20:30
· 4 commits to master since this release
v0.4.1
7324e2f
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Security

  • Fix shell injection through sourceUrl / targetPath: wget is now executed with execFile (no shell) (#3, #4)

Fixes

  • Remove the .part temp file only if it exists and reject with an Error (previously an uncaught ENOENT could crash the process)
  • Remove types from package.json (index.d.ts was missing)

Documentation

  • Maintenance status: this library is not actively maintained (see README)
  • Add "Requirements" and "Security" sections, fix targetPath description

CI

  • Test on Node.js 22.x / 24.x, upgrade GitHub actions and coveralls integration

Full Changelog: v0.4.0...v0.4.1

Assets 2
Loading