@expo/fingerprint - npm Package Compare versions

Comparing version 0.0.1-canary-20240308-6715875 to 0.0.1-canary-20240315-ce71005

bin/cli.js

@@ -32,2 +32,5 @@ #!/usr/bin/env node
 
+  const options = {
+    debug: !!process.env.DEBUG,
+  }
   try {
@@ -37,7 +40,8 @@ if (comparatorFingerprint) {
         comparatorFingerprint,
-        projectRoot
+        projectRoot,
+        options
       );
       console.log(JSON.stringify(diff, null, 2));
     } else {
-      const fingerprint = await Fingerprint.createFingerprintAsync(projectRoot);
+      const fingerprint = await Fingerprint.createFingerprintAsync(projectRoot, options);
       console.log(JSON.stringify(fingerprint, null, 2));
@@ -44,0 +48,0 @@ }

build/Dedup.js

@@ -19,3 +19,3 @@ "use strict";
             const duplicatedItem = newSources[duplicatedItemIndex];
-            debug(`Skipping duplicated source: ${source}`);
+            debug(`Skipping duplicated source: ${JSON.stringify(source)}`);
             if (shouldSwapSource) {
@@ -22,0 +22,0 @@ newSources[duplicatedItemIndex] = {

build/Options.js

@@ -16,12 +16,18 @@ "use strict";
     '**/android/.cxx/**/*',
+    '**/android/.gradle/**/*',
     '**/android/app/build/**/*',
     '**/android/app/.cxx/**/*',
+    '**/android/app/.gradle/**/*',
     '**/android-annotation/build/**/*',
     '**/android-annotation/.cxx/**/*',
+    '**/android-annotation/.gradle/**/*',
     '**/android-annotation-processor/build/**/*',
     '**/android-annotation-processor/.cxx/**/*',
+    '**/android-annotation-processor/.gradle/**/*',
+    // Often has different line endings, thus we have to ignore it
+    '**/android/gradlew.bat',
     // Android gradle plugins
     '**/*-gradle-plugin/build/**/*',
+    '**/*-gradle-plugin/.cxx/**/*',
     '**/*-gradle-plugin/.gradle/**/*',
-    '**/*-gradle-plugin/.cxx/**/*',
     // iOS
@@ -28,0 +34,0 @@ '**/ios/Pods/**/*',

build/sourcer/Expo.d.ts

@@ -5,2 +5,6 @@ import type { HashSource, NormalizedOptions } from '../Fingerprint.types';
 export declare function getExpoAutolinkingAndroidSourcesAsync(projectRoot: string, options: NormalizedOptions): Promise<HashSource[]>;
+/**
+ * Gets the patch sources for the `patch-project`.
+ */
+export declare function getExpoCNGPatchSourcesAsync(projectRoot: string, options: NormalizedOptions): Promise<HashSource[]>;
 export declare function getExpoAutolinkingIosSourcesAsync(projectRoot: string, options: NormalizedOptions): Promise<HashSource[]>;
@@ -7,0 +11,0 @@ /**

build/sourcer/Expo.js

@@ -6,3 +6,3 @@ "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.sortExpoAutolinkingAndroidConfig = exports.getExpoAutolinkingIosSourcesAsync = exports.getExpoAutolinkingAndroidSourcesAsync = exports.getEasBuildSourcesAsync = exports.getExpoConfigSourcesAsync = void 0;
+exports.sortExpoAutolinkingAndroidConfig = exports.getExpoAutolinkingIosSourcesAsync = exports.getExpoCNGPatchSourcesAsync = exports.getExpoAutolinkingAndroidSourcesAsync = exports.getEasBuildSourcesAsync = exports.getExpoConfigSourcesAsync = void 0;
 const spawn_async_1 = __importDefault(require("@expo/spawn-async"));
@@ -164,2 +164,14 @@ const chalk_1 = __importDefault(require("chalk"));
 exports.getExpoAutolinkingAndroidSourcesAsync = getExpoAutolinkingAndroidSourcesAsync;
+/**
+ * Gets the patch sources for the `patch-project`.
+ */
+async function getExpoCNGPatchSourcesAsync(projectRoot, options) {
+    const result = await (0, Utils_1.getFileBasedHashSourceAsync)(projectRoot, 'cng-patches', 'expoCNGPatches');
+    if (result != null) {
+        debug(`Adding dir - ${chalk_1.default.dim('cng-patches')}`);
+        return [result];
+    }
+    return [];
+}
+exports.getExpoCNGPatchSourcesAsync = getExpoCNGPatchSourcesAsync;
 async function getExpoAutolinkingIosSourcesAsync(projectRoot, options) {
@@ -166,0 +178,0 @@ if (!options.platforms.includes('ios')) {

build/sourcer/Sourcer.js

@@ -10,2 +10,3 @@ "use strict";
 const Expo_1 = require("./Expo");
+const Packages_1 = require("./Packages");
 const PatchPackage_1 = require("./PatchPackage");
@@ -21,2 +22,3 @@ const Profile_1 = require("../utils/Profile");
         (0, Profile_1.profile)(options, Expo_1.getEasBuildSourcesAsync)(projectRoot, options),
+        (0, Profile_1.profile)(options, Expo_1.getExpoCNGPatchSourcesAsync)(projectRoot, options),
         // bare managed files
@@ -32,2 +34,4 @@ (0, Profile_1.profile)(options, Bare_1.getGitIgnoreSourcesAsync)(projectRoot, options),
         (0, Profile_1.profile)(options, PatchPackage_1.getPatchPackageSourcesAsync)(projectRoot, options),
+        // some known dependencies, e.g. react-native
+        (0, Profile_1.profile)(options, Packages_1.getDefaultPackageSourcesAsync)(projectRoot, options),
     ]);
@@ -34,0 +38,0 @@ // extra sources

package.json

 {
   "name": "@expo/fingerprint",
-  "version": "0.0.1-canary-20240308-6715875",
+  "version": "0.0.1-canary-20240315-ce71005",
   "description": "A library to generate a fingerprint from a React Native project",
@@ -55,7 +55,7 @@ "main": "build/index.js",
     "@types/find-up": "^4.0.0",
-    "expo-module-scripts": "0.0.1-canary-20240308-6715875",
+    "expo-module-scripts": "0.0.1-canary-20240315-ce71005",
     "glob": "^7.1.7",
     "temp-dir": "^2.0.0"
   },
-  "gitHead": "67158757cf78be8094fe6b7461e8523157f1f615"
+  "gitHead": "ce710059d129b1960d339395251c84e4fa165fe4"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

104017

increased by5.92%

Number of package files

55

increased by5.77%

Lines of code

1425

increased by6.66%

Worsened metrics

Number of low supply chain risk alerts

15

increased by15.38%

No dependency changes