@csml/studio-cli - npm Package Compare versions

Comparing version 0.1.2 to 0.1.3

.github/workflows/npm-publish.yml

@@ -7,4 +7,6 @@ # This workflow will run tests using node and then publish a package to GitHub Packages when a release is created
 on:
-  release:
-    types: [created]
+  push:
+    tags:
+      - v0.*
+      - v1.*
 
@@ -11,0 +13,0 @@ jobs:

dist/commands/init.js

@@ -18,3 +18,3 @@ "use strict";Object.defineProperty(exports, "__esModule", { value: true });exports.default = void 0;var _fs = _interopRequireDefault(require("fs"));
     'Available options for init command:',
-    '   -p, --path         Initial path for bot folder',
+    '   -p, --path         initial path for bot folder',
     '   [-k, --key]        CSML Studio API key',
@@ -42,3 +42,3 @@ '   [-s, --secret]     CSML Studio API secret',
       var secret = _this.argv.s || process.env.API_SECRET;
-      var env = "".concat(key, "\n").concat(secret, "\n");
+      var env = "API_KEY=".concat(key, "\nAPI_SECRET=").concat(secret, "\n");
       _fs.default.writeFileSync(_path.default.join(_this.projectPath, './.env'), env);
@@ -45,0 +45,0 @@ _fs.default.writeFileSync(_path.default.join(_this.projectPath, './.gitignore'), '.env\n');

dist/commands/init.js.map

@@ -1,1 +0,1 @@
-{"version":3,"sources":["commands/init.js"],"names":["Down","baseCommand","constructor","help","green","aliases","key","secret","path","authed","run","projectPath","resolve","process","env","PWD","argv","join","fs","existsSync","Error","bot","BotHelpers","getFromStudio","credentials","writeManifest","k","API_KEY","s","API_SECRET","writeFileSync","_success"],"mappings":"oGAAA;AACA;AACA;AACA;AACA;AACA,qE;;AAEe,MAAMA,IAAN,SAAmBC,aAAnB,CAA+B;AAC5CC,EAAAA,WAAW,GAAG;AACZ;AACA,SAAKC,IAAL,GAAY;AACV,sCADU;AAEV,MAFU;AAGV,8BAA0BC,KAHhB;AAIV,MAJU;AAKV,MALU;AAMV,yCANU;AAOV,uDAPU;AAQV,+CARU;AASV,kDATU;AAUV,iDAVU,CAAZ;;AAYA,SAAKC,OAAL,GAAe;AACbC,MAAAA,GAAG,EAAE,GADQ,EACHC,MAAM,EAAE,GADL,EACUJ,IAAI,EAAE,GADhB,EACqBK,IAAI,EAAE,GAD3B,EAAf;;AAGA,SAAKC,MAAL,GAAc,IAAd;AACD;;AAEKC,EAAAA,GAAN,GAAY;AACV,MAAA,KAAI,CAACC,WAAL,GAAmBH,cAAKI,OAAL,CAAaC,OAAO,CAACC,GAAR,CAAYC,GAAzB,EAA8B,KAAI,CAACC,IAAL,CAAUR,IAAV,IAAkB,IAAhD,CAAnB;;AAEA,YAAM,qBAAO,KAAI,CAACG,WAAZ,CAAN;AACA,YAAM,qBAAOH,cAAKS,IAAL,CAAU,KAAI,CAACN,WAAf,EAA4B,OAA5B,CAAP,CAAN;AACA,UAAIO,YAAGC,UAAH,CAAcX,cAAKS,IAAL,CAAU,KAAI,CAACN,WAAf,EAA4B,YAA5B,CAAd,CAAJ,EAA8D,MAAM,IAAIS,KAAJ,CAAU,8CAAV,CAAN;;AAE9D,UAAMC,GAAG,SAASC,aAAWC,aAAX,CAAyB,KAAI,CAACC,WAA9B,CAAlB;AACAF,mBAAWG,aAAX,CAAyBJ,GAAzB,EAA8B,KAAI,CAACV,WAAnC;;AAEA,UAAML,GAAG,GAAG,KAAI,CAACU,IAAL,CAAUU,CAAV,IAAeb,OAAO,CAACC,GAAR,CAAYa,OAAvC;AACA,UAAMpB,MAAM,GAAG,KAAI,CAACS,IAAL,CAAUY,CAAV,IAAef,OAAO,CAACC,GAAR,CAAYe,UAA1C;AACA,UAAMf,GAAG,aAAMR,GAAN,eAAcC,MAAd,OAAT;AACAW,kBAAGY,aAAH,CAAiBtB,cAAKS,IAAL,CAAU,KAAI,CAACN,WAAf,EAA4B,QAA5B,CAAjB,EAAwDG,GAAxD;AACAI,kBAAGY,aAAH,CAAiBtB,cAAKS,IAAL,CAAU,KAAI,CAACN,WAAf,EAA4B,cAA5B,CAAjB,EAA8D,QAA9D;;AAEA,MAAA,KAAI,CAACoB,QAAL,2DAAiE,KAAI,CAACpB,WAAtE,GAhBU;AAiBX,GAtC2C,C","file":"init.js","sourceRoot":"../../src"}
+{"version":3,"sources":["commands/init.js"],"names":["Down","baseCommand","constructor","help","green","aliases","key","secret","path","authed","run","projectPath","resolve","process","env","PWD","argv","join","fs","existsSync","Error","bot","BotHelpers","getFromStudio","credentials","writeManifest","k","API_KEY","s","API_SECRET","writeFileSync","_success"],"mappings":"oGAAA;AACA;AACA;AACA;AACA;AACA,qE;;AAEe,MAAMA,IAAN,SAAmBC,aAAnB,CAA+B;AAC5CC,EAAAA,WAAW,GAAG;AACZ;AACA,SAAKC,IAAL,GAAY;AACV,sCADU;AAEV,MAFU;AAGV,8BAA0BC,KAHhB;AAIV,MAJU;AAKV,MALU;AAMV,yCANU;AAOV,uDAPU;AAQV,+CARU;AASV,kDATU;AAUV,iDAVU,CAAZ;;AAYA,SAAKC,OAAL,GAAe;AACbC,MAAAA,GAAG,EAAE,GADQ,EACHC,MAAM,EAAE,GADL,EACUJ,IAAI,EAAE,GADhB,EACqBK,IAAI,EAAE,GAD3B,EAAf;;AAGA,SAAKC,MAAL,GAAc,IAAd;AACD;;AAEKC,EAAAA,GAAN,GAAY;AACV,MAAA,KAAI,CAACC,WAAL,GAAmBH,cAAKI,OAAL,CAAaC,OAAO,CAACC,GAAR,CAAYC,GAAzB,EAA8B,KAAI,CAACC,IAAL,CAAUR,IAAV,IAAkB,IAAhD,CAAnB;;AAEA,YAAM,qBAAO,KAAI,CAACG,WAAZ,CAAN;AACA,YAAM,qBAAOH,cAAKS,IAAL,CAAU,KAAI,CAACN,WAAf,EAA4B,OAA5B,CAAP,CAAN;AACA,UAAIO,YAAGC,UAAH,CAAcX,cAAKS,IAAL,CAAU,KAAI,CAACN,WAAf,EAA4B,YAA5B,CAAd,CAAJ,EAA8D,MAAM,IAAIS,KAAJ,CAAU,8CAAV,CAAN;;AAE9D,UAAMC,GAAG,SAASC,aAAWC,aAAX,CAAyB,KAAI,CAACC,WAA9B,CAAlB;AACAF,mBAAWG,aAAX,CAAyBJ,GAAzB,EAA8B,KAAI,CAACV,WAAnC;;AAEA,UAAML,GAAG,GAAG,KAAI,CAACU,IAAL,CAAUU,CAAV,IAAeb,OAAO,CAACC,GAAR,CAAYa,OAAvC;AACA,UAAMpB,MAAM,GAAG,KAAI,CAACS,IAAL,CAAUY,CAAV,IAAef,OAAO,CAACC,GAAR,CAAYe,UAA1C;AACA,UAAMf,GAAG,qBAAcR,GAAd,0BAAiCC,MAAjC,OAAT;AACAW,kBAAGY,aAAH,CAAiBtB,cAAKS,IAAL,CAAU,KAAI,CAACN,WAAf,EAA4B,QAA5B,CAAjB,EAAwDG,GAAxD;AACAI,kBAAGY,aAAH,CAAiBtB,cAAKS,IAAL,CAAU,KAAI,CAACN,WAAf,EAA4B,cAA5B,CAAjB,EAA8D,QAA9D;;AAEA,MAAA,KAAI,CAACoB,QAAL,2DAAiE,KAAI,CAACpB,WAAtE,GAhBU;AAiBX,GAtC2C,C","file":"init.js","sourceRoot":"../../src"}

package.json

 {
   "name": "@csml/studio-cli",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Interact with CSML Studio in CLI - https://studio.csml.dev",
@@ -5,0 +5,0 @@ "bin": {

README.md

@@ -5,2 +5,4 @@ # CSML Studio CLI
 
+![Node.js Package](https://github.com/CSML-by-Clevy/CSML-Studio-CLI/workflows/Node.js%20Package/badge.svg)
+
 ## Installation
@@ -32,3 +34,3 @@
 Available options for init command:
-   -p, --path         Initial path for bot folder
+   -p, --path         initial path for bot folder 
    [-k, --key]        CSML Studio API key
@@ -35,0 +37,0 @@ [-s, --secret]     CSML Studio API secret

src/commands/init.js

@@ -18,3 +18,3 @@ import fs from 'fs';
       'Available options for init command:',
-      '   -p, --path         Initial path for bot folder',
+      '   -p, --path         initial path for bot folder',
       '   [-k, --key]        CSML Studio API key',
@@ -42,3 +42,3 @@ '   [-s, --secret]     CSML Studio API secret',
     const secret = this.argv.s || process.env.API_SECRET;
-    const env = `${key}\n${secret}\n`;
+    const env = `API_KEY=${key}\nAPI_SECRET=${secret}\n`;
     fs.writeFileSync(path.join(this.projectPath, './.env'), env);
@@ -45,0 +45,0 @@ fs.writeFileSync(path.join(this.projectPath, './.gitignore'), '.env\n');

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

92159

0.18%

Number of lines in readme file

116

1.75%

No dependency changes