@esy-nightly/esy - npm Package Compare versions

Comparing version 0.7.2-10-gfec49115 to 0.7.2-101-g9d34038f

package.json

 {
   "name": "@esy-nightly/esy",
-  "version": "0.7.2-10-gfec49115",
+  "version": "0.7.2-101-g9d34038f",
   "license": "BSD-2-Clause",
@@ -5,0 +5,0 @@ "description": "Package builder for esy.",

postinstall.js

@@ -19,8 +19,2 @@ /**
 var packageJson = require('./package.json');
-var binariesToCopy = Object.keys(packageJson.bin)
-  .map(function (name) {
-    return packageJson.bin[name];
-  })
-  .concat(['esyInstallRelease.js']);
-var foldersToCopy = ['bin', '_export'];
 
@@ -133,6 +127,19 @@ function copyRecursive(srcDir, dstDir) {
 
+  let foldersToCopy, binariesToCopy;
+
+  binariesToCopy = Object.keys(packageJson.bin).map(function (name) {
+    return packageJson.bin[name];
+  });
+
+  if (platformPath === 'linux') {
+    fs.mkdirSync(path.join(__dirname, 'lib'));
+    foldersToCopy = ['bin', 'lib'];
+  } else {
+    foldersToCopy = ['bin', '_export'];
+    binariesToCopy = binariesToCopy.concat(['esyInstallRelease.js']);
+  }
+
   foldersToCopy.forEach((folderPath) => {
     var sourcePath = path.join(platformBuildPath, folderPath);
     var destPath = path.join(__dirname, folderPath);
-
     copyRecursive(sourcePath, destPath);
@@ -149,2 +156,8 @@ });
   });
+
+  if (platformPath === 'linux') {
+    fs.chmodSync(path.join(__dirname, 'lib', 'esy', 'esyBuildPackageCommand'), 0755);
+    fs.chmodSync(path.join(__dirname, 'lib', 'esy', 'esySolveCudfCommand'), 0755);
+    fs.chmodSync(path.join(__dirname, 'lib', 'esy', 'esyRewritePrefixCommand'), 0755);
+  }
 };
@@ -171,7 +184,11 @@
     console.log('Native compiler toolchain installed successfully.');
+    require('./esyInstallRelease');
     break;
+  case 'linux':
+    copyPlatformBinaries(platform);
+    // Statically linked binaries dont need postinstall scripts
     break;
-  case 'linux':
   case 'darwin':
     copyPlatformBinaries(platform + (process.arch === 'x64' ? '' : '-arm64'));
+    require('./esyInstallRelease');
     break;
@@ -182,3 +199,1 @@ default:
 }
-
-require('./esyInstallRelease');

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 5 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

144960870

increased by72.09%

Number of package files

27

increased by12.5%

Lines of code

34565

increased by0.04%

Number of high supply chain risk alerts

3

decreased by-25%

Worsened metrics

Number of medium supply chain risk alerts

27

increased by8%

No dependency changes