@qoder-ai/qodercli - npm Package Compare versions

Comparing version 0.2.3 to 0.2.4

package.json

 {
   "name": "@qoder-ai/qodercli",
-  "version": "0.2.3",
+  "version": "0.2.4",
   "description": "qodercli - npm installer",
@@ -47,3 +47,3 @@ "private": false,
   "binaries": {
-    "version": "0.2.3",
+    "version": "0.2.4",
     "files": [
@@ -53,4 +53,4 @@ {
         "arch": "arm64",
-        "url": "https://qoder-ide.oss-ap-southeast-1.aliyuncs.com/qodercli/releases/0.2.3/qodercli-darwin-arm64.tar.gz",
-        "sha256": "d4ffc660fae4fa1bce52a8f90b3bdf862ed7e4c78d0be3d2c7f1a10652fee0d7"
+        "url": "https://qoder-ide.oss-accelerate.aliyuncs.com/qodercli/releases/0.2.4/qodercli-darwin-arm64.tar.gz",
+        "sha256": "c267fd311bd86e5f8629f57b90d010c9a693b02b5e6319064439459ccace1855"
       },
@@ -60,4 +60,4 @@ {
         "arch": "amd64",
-        "url": "https://qoder-ide.oss-ap-southeast-1.aliyuncs.com/qodercli/releases/0.2.3/qodercli-darwin-x64.tar.gz",
-        "sha256": "b125f3a7d527ba2c38e5149aec497962c91bb57e9bb82a44c0badd07991aac0b"
+        "url": "https://qoder-ide.oss-accelerate.aliyuncs.com/qodercli/releases/0.2.4/qodercli-darwin-x64.tar.gz",
+        "sha256": "e50aef06496140e342e66a3ba6324bc6e4086aa212808aa7f1009f3639156d2f"
       },
@@ -67,4 +67,4 @@ {
         "arch": "arm64-musl",
-        "url": "https://qoder-ide.oss-ap-southeast-1.aliyuncs.com/qodercli/releases/0.2.3/qodercli-linux-arm64-musl.tar.gz",
-        "sha256": "99663495215b6ace582460c33973f9aae0c42d077876c14d74636c36268c9094"
+        "url": "https://qoder-ide.oss-accelerate.aliyuncs.com/qodercli/releases/0.2.4/qodercli-linux-arm64-musl.tar.gz",
+        "sha256": "15153bf6a144e122117f601ec55eda2e594e5149bafaf7717fde10fda59b0a0c"
       },
@@ -74,4 +74,4 @@ {
         "arch": "arm64",
-        "url": "https://qoder-ide.oss-ap-southeast-1.aliyuncs.com/qodercli/releases/0.2.3/qodercli-linux-arm64.tar.gz",
-        "sha256": "1b3bd28798da575ce67f27732efee7d9b22a1e046d75b94f307b2bb8cc701b7d"
+        "url": "https://qoder-ide.oss-accelerate.aliyuncs.com/qodercli/releases/0.2.4/qodercli-linux-arm64.tar.gz",
+        "sha256": "b283fdea0105cc9f1bb4ca68ea51065604d158c87f1df7100dc3282cb69d2101"
       },
@@ -81,4 +81,4 @@ {
         "arch": "amd64-baseline",
-        "url": "https://qoder-ide.oss-ap-southeast-1.aliyuncs.com/qodercli/releases/0.2.3/qodercli-linux-x64-baseline.tar.gz",
-        "sha256": "f9caec58ba854017a41ffa9b245b2de52ddbb123971fbe0ffdecf5d8ec22858c"
+        "url": "https://qoder-ide.oss-accelerate.aliyuncs.com/qodercli/releases/0.2.4/qodercli-linux-x64-baseline.tar.gz",
+        "sha256": "36c392ba003d585632ee695e4f02e54c12a86be0b3c333c0b237af639ad7d338"
       },
@@ -88,4 +88,4 @@ {
         "arch": "amd64-musl",
-        "url": "https://qoder-ide.oss-ap-southeast-1.aliyuncs.com/qodercli/releases/0.2.3/qodercli-linux-x64-musl.tar.gz",
-        "sha256": "f5e5c358297a3d571201010d17490b990a1614653c72d3190b0cd7e9d3ba22cb"
+        "url": "https://qoder-ide.oss-accelerate.aliyuncs.com/qodercli/releases/0.2.4/qodercli-linux-x64-musl.tar.gz",
+        "sha256": "4d883e3a165d70983a8c8ea0d586f02726ffc6f78d9b93af91ccb02973f495d5"
       },
@@ -95,4 +95,4 @@ {
         "arch": "amd64",
-        "url": "https://qoder-ide.oss-ap-southeast-1.aliyuncs.com/qodercli/releases/0.2.3/qodercli-linux-x64.tar.gz",
-        "sha256": "a81379dcd18fa7f46e643ebde5fbcd3b0c3fedc3017120998f654dbb0a916900"
+        "url": "https://qoder-ide.oss-accelerate.aliyuncs.com/qodercli/releases/0.2.4/qodercli-linux-x64.tar.gz",
+        "sha256": "1d84d8d75cb6a29bb4e7120d6a08e938f5305f3da0c83b6daea0d9151907c883"
       },
@@ -102,4 +102,4 @@ {
         "arch": "amd64",
-        "url": "https://qoder-ide.oss-ap-southeast-1.aliyuncs.com/qodercli/releases/0.2.3/qodercli-windows-x64.zip",
-        "sha256": "cde970e0485332dd78f79680ead02ec4a885ba3d067da69a3e4b9e534114ac39"
+        "url": "https://qoder-ide.oss-accelerate.aliyuncs.com/qodercli/releases/0.2.4/qodercli-windows-x64.zip",
+        "sha256": "5d377a6395db94d42515fefa6196550d712bd44dd2613728cdf4e48aa4002d85"
       }
@@ -106,0 +106,0 @@ ]

scripts/install.js

@@ -60,2 +60,7 @@ #!/usr/bin/env node
       case 'x64':
+        // On Linux x64, check if CPU supports AVX instructions.
+        // CPUs without AVX need the baseline binary to avoid SIGILL.
+        if (process.platform === 'linux' && !this.hasAVX()) {
+          return 'amd64-baseline';
+        }
         return 'amd64';
@@ -69,2 +74,17 @@ case 'arm64':
 
+  /**
+   * Check if the CPU supports AVX instructions by reading /proc/cpuinfo.
+   * Returns true if AVX is present or detection is unavailable.
+   * Only returns false when we can confirm AVX is absent.
+   */
+  hasAVX() {
+    try {
+      const cpuinfo = fs.readFileSync('/proc/cpuinfo', 'utf-8');
+      return /^flags\s*:.*\bavx\b/m.test(cpuinfo);
+    } catch (e) {
+      // If we can't read cpuinfo, assume AVX is present (safer default)
+      return true;
+    }
+  }
+
   setupLogging() {
@@ -71,0 +91,0 @@ try {

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 2 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

36360

1.91%

Lines of code

587

3.35%

Number of low supply chain risk alerts

4

-33.33%

No dependency changes