diff --git a/auth.js b/auth.js
index d583982d..b8cb4ba1 100644
--- a/auth.js
+++ b/auth.js
@@ -7,7 +7,7 @@ module.exports = getAuth
 function getAuth (registry, opts) {
   if (!registry) { throw new Error('registry is required') }
   opts = config(opts)
-  let AUTH = {}
+  const AUTH = {}
   const regKey = registry && registryKey(registry)
   if (opts.forceAuth) {
     opts = opts.forceAuth