Merge pull request #19 from nodesource/fix/soc2-dependency-vulnerabilities

fix: resolve SOC2 security vulnerabilities in dependencies

Author: JungMinu

index.js

@@ -8,16 +8,16 @@ const analyze = async ({
   dir,
   tree,
   token,
-  pageSize: pageSize = 50,
-  concurrency: concurrency = 5,
-  onPkgs: onPkgs = () => {},
-  filter: filter = () => true,
+  pageSize = 50,
+  concurrency = 5,
+  onPkgs = () => {},
+  filter = () => true,
   url
 }) => {
   if (!tree) tree = await readUniversalTree(dir)
   const pkgs = filterPkgs(tree, filter)
   onPkgs(pkgs)
-  let data = new Set()
+  const data = new Set()
   const pages = splitSet(pkgs, pageSize)
   const batches = splitSet(pages, concurrency)
   for (const batch of batches) {

lib/graphql.js

@@ -4,7 +4,7 @@
 
 const { GraphQLClient } = require('graphql-request')
 
-const NCMAPI_URL = process.env.NCMAPI_URL || 'https://api.nodesource.com/ncm2/api/v1'
+const NCMAPI_URL = process.env.NCMAPI_URL || 'https://api.ncm.nodesource.com/ncm2/api/v2/graphql'
 
 module.exports = (opts, query, variables) => {
   if (typeof opts === 'string') {