@qoder-ai/qodercli
Advanced tools
| #!/usr/bin/env node | ||
| /** | ||
| * npm postinstall hook — writes installation source marker for update routing. | ||
| * Aligned with qodercli-old: core/utils/install/source.go reads this file | ||
| * to determine how the CLI was installed (npm, homebrew-cask, curl-bash). | ||
| */ | ||
| const fs = require('node:fs'); | ||
| const path = require('node:path'); | ||
| try { | ||
| const pkgRoot = path.resolve(__dirname, '..'); | ||
| const markerPath = path.join(pkgRoot, '.qodercli-install-resource'); | ||
| fs.writeFileSync(markerPath, 'npm', 'utf8'); | ||
| } catch { | ||
| // Silent failure — marker is best-effort, should never block installation | ||
| } |
+2
-2
| { | ||
| "name": "@qoder-ai/qodercli", | ||
| "version": "0.2.2-beta.1", | ||
| "version": "0.2.2-beta.2", | ||
| "description": "QoderCLI - AI-powered coding assistant for your terminal", | ||
@@ -20,3 +20,3 @@ "license": "Apache-2.0", | ||
| "scripts": { | ||
| "postinstall": "node bundle/postinstall.js" | ||
| "postinstall": "node bundle/postinstall.cjs" | ||
| }, | ||
@@ -23,0 +23,0 @@ "publishConfig": { |
| #!/usr/bin/env node | ||
| /** | ||
| * npm postinstall hook — writes installation source marker for update routing. | ||
| * Aligned with qodercli-old: core/utils/install/source.go reads this file | ||
| * to determine how the CLI was installed (npm, homebrew-cask, curl-bash). | ||
| */ | ||
| const fs = require('node:fs'); | ||
| const path = require('node:path'); | ||
| try { | ||
| const pkgRoot = path.resolve(__dirname, '..'); | ||
| const markerPath = path.join(pkgRoot, '.qodercli-install-resource'); | ||
| fs.writeFileSync(markerPath, 'npm', 'utf8'); | ||
| } catch { | ||
| // Silent failure — marker is best-effort, should never block installation | ||
| } |
Install scripts
Supply chain riskInstall scripts are run when the package is installed or built. Malicious packages often use scripts that run automatically to execute payloads or fetch additional code.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 1 instance in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Install scripts
Supply chain riskInstall scripts are run when the package is installed or built. Malicious packages often use scripts that run automatically to execute payloads or fetch additional code.
Found 1 instance in 1 package
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 1 instance in 1 package
AI-detected potential code anomaly
Supply chain riskAI has identified unusual behaviors that may pose a security risk.
Found 2 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
73628722
054
-1.82%3
-25%