@npmcli/run-script - npm Package Compare versions

Comparing version 1.0.1 to 1.1.0

lib/promise-spawn.js

 const {spawn} = require('child_process')
 
+const inferOwner = require('infer-owner')
+
 // 'extra' object is for decorating the error a bit more
-const promiseSpawn = (cmd, args, opts, extra = {}) =>
+const promiseSpawn = (cmd, args, opts, extra = {}) => {
+  const cwd = opts.cwd || process.cwd()
+  const isRoot = process.getuid && process.getuid() === 0
+  return !isRoot ? promiseSpawnUid(cmd, args, {
+    ...opts,
+    cwd,
+    uid: undefined,
+    gid: undefined,
+  }, extra)
+  : inferOwner(cwd).then(({uid, gid}) => promiseSpawnUid(cmd, args, {
+    ...opts,
+    cwd,
+    uid,
+    gid,
+  }, extra))
+}
+
+const promiseSpawnUid = (cmd, args, opts, extra) =>
   new Promise((res, rej) => {
@@ -6,0 +25,0 @@ const proc = spawn(cmd, args, opts)

package.json

 {
   "name": "@npmcli/run-script",
-  "version": "1.0.1",
+  "version": "1.1.0",
   "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)",
@@ -23,2 +23,3 @@ "author": "Isaac Z. Schlueter <[e-mail]> (https://izs.me)",
   "dependencies": {
+    "infer-owner": "^1.0.4",
     "read-package-json-fast": "^1.1.3"
@@ -25,0 +26,0 @@ },

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12189

increased by4.03%

Lines of code

189

increased by9.88%

Worsened metrics

Dependency count

2

increased by100%

Dependency changes

• + Addedinfer-owner@^1.0.4

• + Addedinfer-owner@1.0.4(transitive)