From 7d6870a6d06f0797520fb339120c7aaa4a1d3407 Mon Sep 17 00:00:00 2001
From: Michael Kriese <michael.kriese@visualon.de>
Date: Tue, 9 Mar 2021 16:32:24 +0100
Subject: [PATCH] fix(npm): do not cache private packages (#9046)

---
 lib/datasource/npm/get.ts | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/datasource/npm/get.ts b/lib/datasource/npm/get.ts
index b7b36c8e7e..73d20dafba 100644
--- a/lib/datasource/npm/get.ts
+++ b/lib/datasource/npm/get.ts
@@ -224,8 +224,8 @@ export async function getDependency(
       '@typescript-eslint',
     ];
     if (
-      whitelistedPublicScopes.includes(scope) ||
-      !packageName.startsWith('@')
+      !raw.authorization &&
+      (whitelistedPublicScopes.includes(scope) || !packageName.startsWith('@'))
     ) {
       await packageCache.set(cacheNamespace, pkgUrl, dep, cacheMinutes);
     }
-- 
GitLab