@esy-nightly/esy - npm Package Compare versions

Comparing version 0.7.2-2-ge3984e04 to 0.7.2-22-g4944e9bf

package.json

 {
   "name": "@esy-nightly/esy",
-  "version": "0.7.2-2-ge3984e04",
+  "version": "0.7.2-22-g4944e9bf",
   "license": "BSD-2-Clause",
   "description": "Package builder for esy.",
   "scripts": {
-    "postinstall": "node -e \"process.env['OCAML_VERSION'] = process.platform == 'linux' ? '4.12.0-musl.static.flambda': '4.12.0'; process.env['OCAML_PKG_NAME'] = 'ocaml'; require('./postinstall.js')\""
+    "postinstall": "node -e \"process.env['OCAML_VERSION'] = process.platform == 'linux' ? '4.12.0-musl.static.flambda': '4.12.0'; process.env['OCAML_PKG_NAME'] = 'ocaml'; process.env['ESY_RELEASE_REWRITE_PREFIX']=true; require('./postinstall.js')\""
   },
@@ -9,0 +9,0 @@ "bin": {

platform-darwin/package.json

@@ -7,5 +7,5 @@ {
   "scripts": {
-    "postinstall": "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='n.00.0000'; require('./esyInstallRelease.js')\""
+    "postinstall": "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='n.00.0000'; process.env['ESY_RELEASE_REWRITE_PREFIX']=true; require('./esyInstallRelease.js')\""
   },
   "bin": { "esy": "bin/esy" }
 }

platform-darwin/README.md

@@ -59,4 +59,4 @@ # esy
     │
-    ├── esy-install
-    │   This dune library implements installer.
+    ├── esy-fetch
+    │   This dune library implements installer - fetching and installing of package sources
     │
@@ -70,6 +70,2 @@ ├── esy-build-package
     │
-    ├── esy-installer
-    │   Implementation of installation procedure defined with *.install files.
-    │   This re-implements opam-installer.
-    │
     ├── esy-install-npm-release
@@ -84,5 +80,2 @@ │   Sources for `bin/esyInstallRelease.js`.
     │
-    ├── esy-yarn-lockfile
-    │   Parser for a subset of yarn lockfile format.
-    │
     ├── esy-lib
@@ -95,3 +88,6 @@ │   A collection of utility modules shared between other libraries.
     ├── esy.lock
+    │   Lock files. Esy uses itself for development
+    │
     ├── package.json
+    │   Manifest for yarn to manage NPM dependencies of this project
     │
@@ -104,7 +100,8 @@ ├── scripts
     ├── test-e2e-slow
-    │   End-to-end test suite which takes a significant amount of time.
+    │   End-to-end test suite which takes a significant amount of time since they're 
+    │   not mocked or rarely so.
     │   We execute it on CI by placing `@slowtest` token in commit messages.
     │
     └── test-e2e
-        End-to-end test suite.
+        End-to-end test suite that dont need the network. Heavily mocked
 
@@ -139,9 +136,29 @@ ## Workflow
 
-Run:
+`esy` has primarily 3 kinds of tests.
 
+1. Unit tests - useful when developing parsers etc
+2. Slow end-to-end tests 
+3. Fast end-to-end tests
+
+
+#### Unit Tests
+
+These are present inline in the `*.re` files. To run them,
+
 ```
-% make test
+esy b dune runtest
 ```
 
-#### Slow tests
+#### Fast end-to-end tests
+
+These are present in `test-e2e` folder and are written in JS. They're run by `jest`
+
+```
+yarn jest
+```
+
+#### Slow end-to-end tests
+They're present in `test-e2e-slow` and are written in JS. They're supposed to mimick the user's workflow
+as closely as possible.
+
 By placing `@slowtest` token in commit messages, we mark the commit ready for the slow tests framework
@@ -158,3 +175,3 @@ (tests that hit the network). They are run with `node test-e2e-slow/run-slow-tests.js`
 ```sh
-.\node_modules\@prometheansacrifice\esy-bash\re\_build\default\bin\EsyBash.exe bash
+.\node_modules\esy-bash\re\_build\default\bin\EsyBash.exe bash
 ```
@@ -161,0 +178,0 @@

platform-windows-x64/package.json

@@ -7,5 +7,5 @@ {
   "scripts": {
-    "postinstall": "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='n.00.0000'; require('./esyInstallRelease.js')\""
+    "postinstall": "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='n.00.0000'; process.env['ESY_RELEASE_REWRITE_PREFIX']=true; require('./esyInstallRelease.js')\""
   },
   "bin": { "esy": "bin/esy.exe" }
 }

platform-windows-x64/README.md

@@ -59,4 +59,4 @@ # esy
     │
-    ├── esy-install
-    │   This dune library implements installer.
+    ├── esy-fetch
+    │   This dune library implements installer - fetching and installing of package sources
     │
@@ -70,6 +70,2 @@ ├── esy-build-package
     │
-    ├── esy-installer
-    │   Implementation of installation procedure defined with *.install files.
-    │   This re-implements opam-installer.
-    │
     ├── esy-install-npm-release
@@ -84,5 +80,2 @@ │   Sources for `bin/esyInstallRelease.js`.
     │
-    ├── esy-yarn-lockfile
-    │   Parser for a subset of yarn lockfile format.
-    │
     ├── esy-lib
@@ -95,3 +88,6 @@ │   A collection of utility modules shared between other libraries.
     ├── esy.lock
+    │   Lock files. Esy uses itself for development
+    │
     ├── package.json
+    │   Manifest for yarn to manage NPM dependencies of this project
     │
@@ -104,7 +100,8 @@ ├── scripts
     ├── test-e2e-slow
-    │   End-to-end test suite which takes a significant amount of time.
+    │   End-to-end test suite which takes a significant amount of time since they're 
+    │   not mocked or rarely so.
     │   We execute it on CI by placing `@slowtest` token in commit messages.
     │
     └── test-e2e
-        End-to-end test suite.
+        End-to-end test suite that dont need the network. Heavily mocked
 
@@ -139,9 +136,29 @@ ## Workflow
 
-Run:
+`esy` has primarily 3 kinds of tests.
 
+1. Unit tests - useful when developing parsers etc
+2. Slow end-to-end tests 
+3. Fast end-to-end tests
+
+
+#### Unit Tests
+
+These are present inline in the `*.re` files. To run them,
+
 ```
-% make test
+esy b dune runtest
 ```
 
-#### Slow tests
+#### Fast end-to-end tests
+
+These are present in `test-e2e` folder and are written in JS. They're run by `jest`
+
+```
+yarn jest
+```
+
+#### Slow end-to-end tests
+They're present in `test-e2e-slow` and are written in JS. They're supposed to mimick the user's workflow
+as closely as possible.
+
 By placing `@slowtest` token in commit messages, we mark the commit ready for the slow tests framework
@@ -158,3 +175,3 @@ (tests that hit the network). They are run with `node test-e2e-slow/run-slow-tests.js`
 ```sh
-.\node_modules\@prometheansacrifice\esy-bash\re\_build\default\bin\EsyBash.exe bash
+.\node_modules\esy-bash\re\_build\default\bin\EsyBash.exe bash
 ```
@@ -161,0 +178,0 @@

README.md

@@ -59,4 +59,4 @@ # esy
     │
-    ├── esy-install
-    │   This dune library implements installer.
+    ├── esy-fetch
+    │   This dune library implements installer - fetching and installing of package sources
     │
@@ -70,6 +70,2 @@ ├── esy-build-package
     │
-    ├── esy-installer
-    │   Implementation of installation procedure defined with *.install files.
-    │   This re-implements opam-installer.
-    │
     ├── esy-install-npm-release
@@ -84,5 +80,2 @@ │   Sources for `bin/esyInstallRelease.js`.
     │
-    ├── esy-yarn-lockfile
-    │   Parser for a subset of yarn lockfile format.
-    │
     ├── esy-lib
@@ -95,3 +88,6 @@ │   A collection of utility modules shared between other libraries.
     ├── esy.lock
+    │   Lock files. Esy uses itself for development
+    │
     ├── package.json
+    │   Manifest for yarn to manage NPM dependencies of this project
     │
@@ -104,7 +100,8 @@ ├── scripts
     ├── test-e2e-slow
-    │   End-to-end test suite which takes a significant amount of time.
+    │   End-to-end test suite which takes a significant amount of time since they're 
+    │   not mocked or rarely so.
     │   We execute it on CI by placing `@slowtest` token in commit messages.
     │
     └── test-e2e
-        End-to-end test suite.
+        End-to-end test suite that dont need the network. Heavily mocked
 
@@ -139,9 +136,29 @@ ## Workflow
 
-Run:
+`esy` has primarily 3 kinds of tests.
 
+1. Unit tests - useful when developing parsers etc
+2. Slow end-to-end tests 
+3. Fast end-to-end tests
+
+
+#### Unit Tests
+
+These are present inline in the `*.re` files. To run them,
+
 ```
-% make test
+esy b dune runtest
 ```
 
-#### Slow tests
+#### Fast end-to-end tests
+
+These are present in `test-e2e` folder and are written in JS. They're run by `jest`
+
+```
+yarn jest
+```
+
+#### Slow end-to-end tests
+They're present in `test-e2e-slow` and are written in JS. They're supposed to mimick the user's workflow
+as closely as possible.
+
 By placing `@slowtest` token in commit messages, we mark the commit ready for the slow tests framework
@@ -158,3 +175,3 @@ (tests that hit the network). They are run with `node test-e2e-slow/run-slow-tests.js`
 ```sh
-.\node_modules\@prometheansacrifice\esy-bash\re\_build\default\bin\EsyBash.exe bash
+.\node_modules\esy-bash\re\_build\default\bin\EsyBash.exe bash
 ```
@@ -161,0 +178,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 2 instances in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 5 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 2 instances in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 3 instances in 1 package

Improved metrics

Total package byte prevSize

84481775

increased by0.5%

Number of package files

26

increased by8.33%

Number of lines in readme file

296

increased by6.09%

Worsened metrics

Number of medium supply chain risk alerts

27

increased by8%

No dependency changes