From 5d4f5899d991ad94a12be5709767fd9ec9e2fc71 Mon Sep 17 00:00:00 2001
From: Heiko Does <heiko.does@provinzial.com>
Date: Fri, 17 Jan 2020 13:47:10 +0100
Subject: [PATCH 1/2] chore: update engine to node 12

---
 package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/package.json b/package.json
index 62c6a32f..06ce2b3e 100644
--- a/package.json
+++ b/package.json
@@ -83,6 +83,6 @@
     "supertest": "^3.0.0"
   },
   "engines": {
-    "node": "10.x.x"
+    "node": "12.x.x"
   }
 }

From 5af658e4e5286e5919fcdd4ab2809c23038b36c1 Mon Sep 17 00:00:00 2001
From: Heiko Does <heiko.does@provinzial.com>
Date: Fri, 17 Jan 2020 13:47:49 +0100
Subject: [PATCH 2/2] fix: use tarball url from package config

---
 modules/utils/npm.js | 9 +++++----
 1 file changed, 5 insertions(+), 4 deletions(-)

diff --git a/modules/utils/npm.js b/modules/utils/npm.js
index ba378516..b06caa92 100644
--- a/modules/utils/npm.js
+++ b/modules/utils/npm.js
@@ -167,10 +167,11 @@ export async function getPackageConfig(packageName, version, log) {
  * Returns a stream of the tarball'd contents of the given package.
  */
 export async function getPackage(packageName, version, log) {
-  const tarballName = isScopedPackageName(packageName)
-    ? packageName.split('/')[1]
-    : packageName;
-  const tarballURL = `${npmRegistryURL}/${packageName}/-/${tarballName}-${version}.tgz`;
+  const packageConfig = getPackageConfig(packageName, version, log);
+  if (!packageConfig && !packageConfig.dist && !packageConfig.dist.tarball) {
+    return null;
+  }
+  const tarballURL = packageConfig.dist.tarball;
 
   log.debug('Fetching package for %s from %s', packageName, tarballURL);