@esy-nightly/esy - npm Package Compare versions

Comparing version 0.7.2-11-gd7f7bdde to 0.7.2-16-gb814135b

package.json

 {
   "name": "@esy-nightly/esy",
-  "version": "0.7.2-11-gd7f7bdde",
+  "version": "0.7.2-16-gb814135b",
   "license": "BSD-2-Clause",
   "description": "Package builder for esy.",
   "scripts": {
-    "postinstall": "node -e \"process.env['OCAML_VERSION'] = process.platform == 'linux' ? '4.12.0-musl.static.flambda': '4.12.0'; process.env['OCAML_PKG_NAME'] = 'ocaml'; require('./postinstall.js')\""
+    "postinstall": "node -e \"process.env['OCAML_VERSION'] = process.platform == 'linux' ? '4.12.0-musl.static.flambda': '4.12.0'; process.env['OCAML_PKG_NAME'] = 'ocaml'; process.env['ESY_RELEASE_REWRITE_PREFIX']=true; require('./postinstall.js')\""
   },
@@ -9,0 +9,0 @@ "bin": {

platform-darwin/package.json

@@ -7,5 +7,5 @@ {
   "scripts": {
-    "postinstall": "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='n.00.0000'; require('./esyInstallRelease.js')\""
+    "postinstall": "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='n.00.0000'; process.env['ESY_RELEASE_REWRITE_PREFIX']=true; require('./esyInstallRelease.js')\""
   },
   "bin": { "esy": "bin/esy" }
 }

platform-windows-x64/package.json

@@ -7,5 +7,5 @@ {
   "scripts": {
-    "postinstall": "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='n.00.0000'; require('./esyInstallRelease.js')\""
+    "postinstall": "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='n.00.0000'; process.env['ESY_RELEASE_REWRITE_PREFIX']=true; require('./esyInstallRelease.js')\""
   },
   "bin": { "esy": "bin/esy.exe" }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 2 instances in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 5 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 2 instances in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

84440563

increased by0.24%

Number of package files

26

increased by8.33%

Worsened metrics

Number of medium supply chain risk alerts

27

increased by8%

No dependency changes