@pdftron/pdfnet-node - npm Package Compare versions

Comparing version 11.11.0 to 11.11.1

package.json

 {
   "name": "@pdftron/pdfnet-node",
-  "version": "11.11.0",
+  "version": "11.11.1",
   "main": "./lib/pdfnet.js",
@@ -5,0 +5,0 @@ "types": "./lib/types.d.ts",

scripts/install.js

@@ -7,3 +7,8 @@ const { execSync } = require('child_process');
 const abi = process.versions.modules; // Node ABI
-const platform = process.platform;     // linux, darwin, win32
+let platform = process.platform;     // linux, darwin, win32
+const isAlpine = fs.existsSync('/etc/alpine-release');
+if (isAlpine) {
+  platform = "alpine"
+}
+
 const arch = process.arch;             // x64, arm64, etc.
@@ -22,19 +27,4 @@ const version = pkg.version;
 
-function npmSupportsExec() {
-  try {
-    const version = execSync('npm --version', { encoding: 'utf8' }).trim();
-    const major = Number(version.split('.')[0]);
-    return major >= 7;
-  } catch {
-    return false;
-  }
-}
-
 try {
-  if (npmSupportsExec()) {
-    execSync(`npm exec prebuild-install -- --download ${prebuildUrl} --verbose`, { stdio: 'inherit' });
-  } else {
-    console.log("npm exec not found, falling back to npx")
-    execSync(`npx prebuild-install --download ${prebuildUrl} --verbose`, { stdio: 'inherit' });
-  }
+  execSync(`npx prebuild-install --download ${prebuildUrl} --verbose`, { stdio: 'inherit' });
 
@@ -41,0 +31,0 @@ const extractedFolder = `node-v${abi}-${platform}-${arch}`;

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Worsened metrics

Total package byte prevSize

144067

-42.24%

Lines of code

61

-14.08%

No dependency changes