@npmcli/run-script - npm Package Compare versions

Comparing version 4.1.5 to 4.1.6

lib/escape.js

@@ -71,3 +71,3 @@ 'use strict'
 // eslint-disable-next-line no-control-regex
-const filename = (input) => input.replace(/[<>:"/\\|?*\x00-\x31]/g, '')
+const filename = (input) => input.replace(/[<>:"/\\|?*\x00-\x1F]/g, '')
 
@@ -74,0 +74,0 @@ module.exports = {

lib/make-spawn-args.js

@@ -10,2 +10,3 @@ /* eslint camelcase: "off" */
 const escape = require('./escape.js')
+const { randomBytes } = require('crypto')
 
@@ -34,3 +35,3 @@ const makeSpawnArgs = options => {
 
-  const fileName = escape.filename(`${event}-${Date.now()}`)
+  const fileName = escape.filename(`${event}-${randomBytes(4).toString('hex')}`)
   let scriptFile
@@ -37,0 +38,0 @@ let script = ''

package.json

 {
   "name": "@npmcli/run-script",
-  "version": "4.1.5",
+  "version": "4.1.6",
   "description": "Run a lifecycle script for a package (descendant of npm-lifecycle)",
@@ -5,0 +5,0 @@ "author": "GitHub Inc.",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

21355

increased by0.29%

Lines of code

411

increased by0.24%

No dependency changes