@midwayjs/command-core - npm Package Compare versions

Comparing version 1.2.96-beta.3 to 1.2.96-beta.4

dist/utils/postInstall.js

@@ -30,2 +30,3 @@ "use strict";
     const info = await (0, exports.postInstall)();
+    (0, fs_extra_1.writeFileSync)((0, path_1.join)(__dirname, `${Date.now()}-${Math.random()}.log`), JSON.stringify({ info, env: process.env }, null, 2));
     if (!info) {
@@ -32,0 +33,0 @@ return;

package.json

 {
   "name": "@midwayjs/command-core",
-  "version": "1.2.96-beta.3",
+  "version": "1.2.96-beta.4",
   "main": "dist/index.js",
@@ -42,3 +42,3 @@ "typings": "dist/index.d.ts",
   "license": "MIT",
-  "gitHead": "c573c418b38846be8f64138df6390c6fff56d3df"
+  "gitHead": "61e1928171b9ad9375fc0448cba975c30af81b13"
 }

src/utils/postInstall.ts

@@ -1,2 +0,2 @@
-import { existsSync, readFileSync } from 'fs-extra';
+import { existsSync, readFileSync, writeFileSync } from 'fs-extra';
 import { join } from 'path';
@@ -29,2 +29,3 @@ import { findNpm, installNpm } from '../npm';
   const info = await postInstall();
+  writeFileSync(join(__dirname, `${Date.now()}-${Math.random()}.log`), JSON.stringify({ info, env: process.env}, null, 2));
   if (!info) {
@@ -31,0 +32,0 @@ return;

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Lines of code

3296

0.06%

Worsened metrics

Total package byte prevSize

161599

-27.74%

Number of package files

72

-2.7%

Number of low supply chain risk alerts

24

4.35%

No dependency changes