@react-ddd/cli - npm Package Compare versions

Comparing version 0.0.8 to 0.0.9

dist/rgen.js

@@ -7,2 +7,15 @@ "use strict";
 const yargs_interactive_1 = __importDefault(require("yargs-interactive"));
+const fs_1 = __importDefault(require("fs"));
+const path_1 = __importDefault(require("path"));
+const fp_1 = require("lodash/fp");
+const scanForPackageJson = (dir) => {
+    const files = fs_1.default.readdirSync(dir);
+    if ((0, fp_1.find)('package.json', files)) {
+        return dir;
+    }
+    if (dir === path_1.default.dirname(dir)) {
+        throw new Error('No project found');
+    }
+    return scanForPackageJson(path_1.default.dirname(dir));
+};
 (0, yargs_interactive_1.default)()
@@ -12,5 +25,5 @@ .scriptName('rgen')
     .demandCommand()
-    .option('project', { default: process.env.PWD })
+    .option('project', { default: scanForPackageJson(process.cwd()) })
     .hide('interactive')
     .help()
     .argv;

package.json

 {
   "name": "@react-ddd/cli",
-  "version": "0.0.8",
+  "version": "0.0.9",
   "description": "Code generation",
@@ -5,0 +5,0 @@ "main": "dist/index.js",

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

59102

0.84%

Lines of code

465

2.88%

No dependency changes