@matter/create - npm Package Compare versions

Comparing version 0.11.0-alpha.0-20241027-de3c9d280 to 0.11.0-alpha.0-20241028-49a4707cf

bin/create.js

@@ -1,2 +0,2 @@
-#!/usr/bin/env matter-run
+#!/usr/bin/env node
 import "../dist/esm/cli.js";

package.json

 {
     "name": "@matter/create",
-    "version": "0.11.0-alpha.0-20241027-de3c9d280",
+    "version": "0.11.0-alpha.0-20241028-49a4707cf",
     "description": "Matter.js skeleton project generator",
@@ -12,2 +12,8 @@ "type": "module",
     },
+    "files": [
+        "dist/**/*",
+        "src/**/*",
+        "LICENSE",
+        "README.md"
+    ],
     "bin": {
@@ -30,3 +36,3 @@ "matter-create": "bin/create.js"
     "devDependencies": {
-        "@matter/tools": "0.11.0-alpha.0-20241027-de3c9d280",
+        "@matter/tools": "0.11.0-alpha.0-20241028-49a4707cf",
         "@types/node": "^22.8.1",
@@ -33,0 +39,0 @@ "@types/tar-stream": "^3.1.3"

src/build.config.ts

@@ -52,3 +52,6 @@ /**
 
+    // We set the version after build so we don't know actual version here.  This placeholder is just used in dev.  We
+    // then replace with the "create" package version on init if it's not a git build
     const matterJsVersion = `~${await readFile(project.pkg.workspace.resolve("version.txt"), "utf-8")}`;
+
     const typescriptVersion = project.pkg.findPackage("@matter/tools").json.dependencies.typescript;
@@ -55,0 +58,0 @@

src/cli.ts

@@ -95,3 +95,5 @@ /**
 
-    notice(`${bold("Success!")} Run your new app using ${bold("npm run app")}.`);
+    const where = project.dest !== "." && project.dest !== process.cwd() ? ` in ${bold(project.dest)}` : "";
+
+    notice(`${bold("Success!")} Run your new app using ${bold("npm run app")}${where}.`);
 }

src/config.ts

@@ -10,3 +10,4 @@ /**
 
-export const TEMPLATE_DIR = resolve(import.meta.dirname, "../templates");
+const CREATE_DIR = resolve(import.meta.dirname, "../..");
+export const TEMPLATE_DIR = resolve(CREATE_DIR, "dist/templates");
 
@@ -32,3 +33,8 @@ export interface Template {
 
+    const packageJson = JSON.parse(await readFile(resolve(CREATE_DIR, "package.json"), "utf-8")) as { version: string };
+    if (packageJson.version !== "0.0.0-git") {
+        config.matterJsVersion = `^${packageJson.version}`;
+    }
+
     return config;
 }

src/new-project.ts

@@ -145,3 +145,3 @@ /**
 function build(this: NewProject) {
-    execSync(`npm -q install`, { stdio: "inherit", cwd: this.dest });
+    execSync(`npm install --silent`, { stdio: "inherit", cwd: this.dest });
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

166558

increased by484.15%

Number of package files

56

increased by330.77%

Lines of code

3352

increased by625.54%

Worsened metrics

Number of low supply chain risk alerts

3

increased byInfinity%

Number of medium supply chain risk alerts

2

increased byInfinity%

No dependency changes