ws/build/config.gypi file contains envinroment variables including proxy authentication credentials

[animedbz16]

I'm using nvm to manage multiple versions of node and to install them under my user directory and I have installed module that has several dependencies that lead to this module being installed:

socket.io -> socket.io-client -> ws

Reviewing my ~/.nvm/ directory, I have noticed that my proxy authentication credentials have been stored into a config.gypi file under the ws module:

~/.nvm/<node version>/.../node_modules/socket.io/node_modules/socket.io-client/node_modules/ws/build/config.gypi

Entries exist for http_proxy, which are likely pulled out of the bash environment I set up to configure my proxy settings (e.g. http://<user>:<password>@proxy.<domain>.com:<port>) in order to connect to the internet to install modules via npm. This file appears to contain some other information regarding system environment settings, etc...

Just wondering why this file is getting created. Is it something to do specifically with this module? If it is necessary or not and it seems unwise to pull out some of these settings to store since it could contain sensitive information.

[3rd-Eden]

It's probably generated by node-gyp during compilation of the binary add-ons. It's beyond our control. If you want to know more about it I suggest raising an issue at https://github.com/TooTallNate/node-gyp

[animedbz16]

@3rd-Eden Thanks for the clarification. I'll open an issue there.