@hyperledger/indy-vdr-nodejs - npm Package Compare versions

Comparing version 0.1.0-dev.2 to 0.1.0-dev.3

scripts/arch.js

+const os = require('os')
+
+// Find appropriate target architecture for retrieving the anoncreds library
+const arch = os.arch()
+const platform = os.platform()
+
+// Architecture mapping
+// This is used because node-pre-gyp uses `os.arch()` for
+// architecture detection, but our library uses a different
+// naming convention
+const archTable = {
+  x64: 'x86_64',
+  arm64: 'aarch64',
+}
+
+const targetArchitecture = platform == 'darwin' ? 'universal' : archTable[arch]
+
+if (targetArchitecture) {
+  // We console.log here because when we use the `yarn install` script
+  // er evaluate this script and use the output as an argument to
+  // node-pre-gyp as `--arch=$(node -e arch.js)`
+  console.log(targetArchitecture)
+}

package.json

 {
   "name": "@hyperledger/indy-vdr-nodejs",
-  "version": "0.1.0-dev.2",
+  "version": "0.1.0-dev.3",
   "license": "Apache-2.0",
@@ -20,5 +20,3 @@ "description": "Nodejs wrapper for Indy Vdr",
     "build",
-    "README.md",
-    "LICENSE",
-    "package.json"
+    "scripts"
   ],
@@ -30,3 +28,3 @@ "scripts": {
     "test": "jest",
-    "install": "node-pre-gyp install"
+    "install": "node-pre-gyp install --target_arch=$(node scripts/arch.js)"
   },
@@ -48,3 +46,3 @@ "devDependencies": {
   "dependencies": {
-    "@hyperledger/indy-vdr-shared": "0.1.0-dev.2",
+    "@hyperledger/indy-vdr-shared": "0.1.0-dev.3",
     "@mapbox/node-pre-gyp": "^1.0.10",
@@ -59,7 +57,7 @@ "ffi-napi": "^4.0.3",
     "module_path": "native",
-    "remote_path": "v0.4.0-dev.2",
+    "remote_path": "v0.4.0-dev.3",
     "host": "https://github.com/hyperledger/indy-vdr/releases/download/",
-    "package_name": "library-{platform}.tar.gz"
+    "package_name": "library-{platform}-{arch}.tar.gz"
   },
-  "gitHead": "4915d593bfd4d74241ae225dbc822384bbc5c2ca"
+  "gitHead": "4e2d1c1cf81f0e3e9e2b1607658d98ec47daee66"
 }

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed or built. Malicious packages often use scripts that run automatically to execute payloads or fetch additional code.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed or built. Malicious packages often use scripts that run automatically to execute payloads or fetch additional code.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

81675

0.89%

Number of package files

45

2.27%

Lines of code

916

2.12%

Number of low supply chain risk alerts

2

-33.33%

Dependency changes

• + Added

  @hyperledger/indy-vdr-shared@0.1.0-dev.3
  (transitive)

• - Removed

  @hyperledger/indy-vdr-shared@0.1.0-dev.2
  (transitive)

• Updated

  @hyperledger/indy-vdr-shared@0.1.0-dev.3