@graphql-toolkit/file-loading - npm Package Compare versions

Comparing version 0.6.8-alpha-23bbb51.1 to 0.6.8-alpha-2cde5e8.4

dist/commonjs/file-scanner.js

 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 const graphql_1 = require("graphql");
-const fs_1 = require("fs");
-const glob = require("glob");
-const path_1 = require("path");
 const DEFAULT_IGNORED_SCHEMA_EXTENSIONS = ['spec', 'test', 'd', 'map'];
@@ -14,6 +11,8 @@ const DEFAULT_SCHEMA_EXTENSIONS = ['gql', 'graphql', 'graphqls', 'ts', 'js'];
 function isDirectory(path) {
-    return fs_1.existsSync(path) && fs_1.statSync(path).isDirectory();
+    const fs = eval(`require('fs')`);
+    return fs.existsSync(path) && fs.statSync(path).isDirectory();
 }
 function scanForFiles(globStr, globOptions = {}) {
-    return glob.sync(globStr, { absolute: true, ...globOptions });
+    const { sync } = eval(`require('glob')`);
+    return sync(globStr, { absolute: true, ...globOptions });
 }
@@ -63,5 +62,6 @@ function buildGlob(basePath, extensions, ignoredExtensions = [], recursive) {
         }
-        const extension = path_1.extname(path);
+        const { extname } = eval(`require('path')`);
+        const extension = extname(path);
         if (extension.endsWith('.js') || extension.endsWith('.ts') || execOptions.useRequire) {
-            const fileExports = (execOptions.requireMethod ? execOptions.requireMethod : require)(path);
+            const fileExports = (execOptions.requireMethod ? execOptions.requireMethod : eval('require'))(path);
             const extractedExport = extractExports(fileExports, execOptions.exportNames);
@@ -74,3 +74,4 @@ if (extractedExport && extractedExport.kind === 'Document') {
         else {
-            return fs_1.readFileSync(path, { encoding: 'utf-8' });
+            const { readFileSync } = eval(`require('fs')`);
+            return readFileSync(path, { encoding: 'utf-8' });
         }
@@ -102,3 +103,3 @@ })
         try {
-            const fileExports = (execOptions.requireMethod ? execOptions.requireMethod : require)(path);
+            const fileExports = (execOptions.requireMethod ? execOptions.requireMethod : eval('require'))(path);
             return extractExports(fileExports, execOptions.exportNames);
@@ -114,2 +115,3 @@ }
 function scanForFilesAsync(globStr, globOptions = {}) {
+    const glob = eval(`require('glob')`);
     return new Promise((resolve, reject) => glob(globStr, { absolute: true, ...globOptions }, (err, matches) => {
@@ -145,3 +147,3 @@ if (err) {
     const relevantPaths = await scanForFilesAsync(isDirectory(path) ? buildGlob(path, execOptions.extensions, execOptions.ignoredExtensions, execOptions.recursive) : path, options.globOptions);
-    const require$ = (path) => Promise.resolve().then(() => require(path));
+    const require$ = (path) => Promise.resolve().then(() => eval(`require('${path}')`));
     return Promise.all(relevantPaths
@@ -155,3 +157,4 @@ .map(async (path) => {
         }
-        const extension = path_1.extname(path);
+        const { extname } = eval(`require('path')`);
+        const extension = extname(path);
         if (extension.endsWith('.js') || extension.endsWith('.ts') || execOptions.useRequire) {
@@ -167,3 +170,4 @@ const fileExports = await (execOptions.requireMethod ? execOptions.requireMethod : require$)(path);
             return new Promise((resolve, reject) => {
-                fs_1.readFile(path, { encoding: 'utf-8' }, (err, data) => {
+                const { readFile } = eval(`require('fs')`);
+                readFile(path, { encoding: 'utf-8' }, (err, data) => {
                     if (err) {
@@ -183,3 +187,3 @@ reject(err);
     const relevantPaths = await scanForFilesAsync(isDirectory(path) ? buildGlob(path, execOptions.extensions, execOptions.ignoredExtensions, execOptions.recursive) : path, options.globOptions);
-    const require$ = (path) => Promise.resolve().then(() => require(path));
+    const require$ = (path) => Promise.resolve().then(() => eval(`require('${path}')`));
     return Promise.all(relevantPaths.map(async (path) => {
@@ -186,0 +190,0 @@ if (!checkExtension(path, options)) {

dist/esnext/file-scanner.js

 import { print } from 'graphql';
-import { existsSync, statSync, readFileSync, readFile } from 'fs';
-import * as glob from 'glob';
-import { extname } from 'path';
 const DEFAULT_IGNORED_SCHEMA_EXTENSIONS = ['spec', 'test', 'd', 'map'];
@@ -12,6 +9,8 @@ const DEFAULT_SCHEMA_EXTENSIONS = ['gql', 'graphql', 'graphqls', 'ts', 'js'];
 function isDirectory(path) {
-    return existsSync(path) && statSync(path).isDirectory();
+    const fs = eval(`require('fs')`);
+    return fs.existsSync(path) && fs.statSync(path).isDirectory();
 }
 function scanForFiles(globStr, globOptions = {}) {
-    return glob.sync(globStr, { absolute: true, ...globOptions });
+    const { sync } = eval(`require('glob')`);
+    return sync(globStr, { absolute: true, ...globOptions });
 }
@@ -61,5 +60,6 @@ function buildGlob(basePath, extensions, ignoredExtensions = [], recursive) {
         }
+        const { extname } = eval(`require('path')`);
         const extension = extname(path);
         if (extension.endsWith('.js') || extension.endsWith('.ts') || execOptions.useRequire) {
-            const fileExports = (execOptions.requireMethod ? execOptions.requireMethod : require)(path);
+            const fileExports = (execOptions.requireMethod ? execOptions.requireMethod : eval('require'))(path);
             const extractedExport = extractExports(fileExports, execOptions.exportNames);
@@ -72,2 +72,3 @@ if (extractedExport && extractedExport.kind === 'Document') {
         else {
+            const { readFileSync } = eval(`require('fs')`);
             return readFileSync(path, { encoding: 'utf-8' });
@@ -99,3 +100,3 @@ }
         try {
-            const fileExports = (execOptions.requireMethod ? execOptions.requireMethod : require)(path);
+            const fileExports = (execOptions.requireMethod ? execOptions.requireMethod : eval('require'))(path);
             return extractExports(fileExports, execOptions.exportNames);
@@ -110,2 +111,3 @@ }
 function scanForFilesAsync(globStr, globOptions = {}) {
+    const glob = eval(`require('glob')`);
     return new Promise((resolve, reject) => glob(globStr, { absolute: true, ...globOptions }, (err, matches) => {
@@ -141,3 +143,3 @@ if (err) {
     const relevantPaths = await scanForFilesAsync(isDirectory(path) ? buildGlob(path, execOptions.extensions, execOptions.ignoredExtensions, execOptions.recursive) : path, options.globOptions);
-    const require$ = (path) => import(path);
+    const require$ = (path) => Promise.resolve().then(() => eval(`require('${path}')`));
     return Promise.all(relevantPaths
@@ -151,2 +153,3 @@ .map(async (path) => {
         }
+        const { extname } = eval(`require('path')`);
         const extension = extname(path);
@@ -163,2 +166,3 @@ if (extension.endsWith('.js') || extension.endsWith('.ts') || execOptions.useRequire) {
             return new Promise((resolve, reject) => {
+                const { readFile } = eval(`require('fs')`);
                 readFile(path, { encoding: 'utf-8' }, (err, data) => {
@@ -178,3 +182,3 @@ if (err) {
     const relevantPaths = await scanForFilesAsync(isDirectory(path) ? buildGlob(path, execOptions.extensions, execOptions.ignoredExtensions, execOptions.recursive) : path, options.globOptions);
-    const require$ = (path) => import(path);
+    const require$ = (path) => Promise.resolve().then(() => eval(`require('${path}')`));
     return Promise.all(relevantPaths.map(async (path) => {
@@ -181,0 +185,0 @@ if (!checkExtension(path, options)) {

package.json

 {
   "name": "@graphql-toolkit/file-loading",
-  "version": "0.6.8-alpha-23bbb51.1+23bbb51",
+  "version": "0.6.8-alpha-2cde5e8.4+2cde5e8",
   "description": "A set of utils for faster development of GraphQL tools",
@@ -25,3 +25,3 @@ "repository": "[e-mail]:dotansimha/graphql-toolkit.git",
     "@types/glob": "7.1.1",
-    "@types/jest": "24.0.21",
+    "@types/jest": "24.0.22",
     "@types/node": "12.12.5",
@@ -31,6 +31,6 @@ "graphql": "14.5.8",
     "ts-jest": "24.1.0",
-    "typescript": "3.6.3"
+    "typescript": "3.7.2"
   },
   "dependencies": {
-    "@graphql-toolkit/common": "0.6.8-alpha-23bbb51.1+23bbb51",
+    "@graphql-toolkit/common": "0.6.8-alpha-2cde5e8.4+2cde5e8",
     "@kamilkisiela/graphql-tools": "4.0.6",
@@ -42,3 +42,3 @@ "glob": "7.1.5"
   },
-  "gitHead": "23bbb512598c95e67ba4476ca410e7049655db02"
+  "gitHead": "2cde5e8f3f6632320d783b2bebf7b57e7274a778"
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

43270

increased by3.7%

Lines of code

452

increased by1.8%

Number of low supply chain risk alerts

1

decreased by-88.89%

Worsened metrics

Number of medium supply chain risk alerts

23

increased by2200%

Dependency changes

• Updated@graphql-toolkit/common@0.6.8-alpha-2cde5e8.4+2cde5e8