@electron/build-tools - npm Package Compare versions

Comparing version 1.0.1 to 1.0.2

package.json

 {
   "name": "@electron/build-tools",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "A wrapper toolkit for working with Electron.js source code",
@@ -5,0 +5,0 @@ "main": "index.js",

preinstall.js

 #!/usr/bin/env node
 
+const { existsSync} = require('fs') 
 const { execSync } = require('child_process');
@@ -16,5 +17,10 @@ const { homedir } = require('os');
     // Install build-tools deps.
-    execSync('yarn install', { stdio: 'inherit', cwd: installPath });
+    execSync('npx yarn install', { stdio: 'inherit', cwd: installPath });
   } catch (err) {
     console.error('Failed to install build-tools: ', err);
+
+    // Delete cloned repo to prevent retry failure.
+    if (existsSync(installPath)) {
+      execSync(`rm -rf ${installPath}`, { stdio: 'inherit' });
+    }
   }
@@ -21,0 +27,0 @@ }

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2097

increased by10.43%

Lines of code

22

increased by29.41%

Worsened metrics

Number of low supply chain risk alerts

1

increased byInfinity%

No dependency changes