@react-native-community/cli-config-apple - npm Package Compare versions

Comparing version 20.0.0 to 20.0.1

build/tools/installPods.js

@@ -37,2 +37,3 @@ "use strict";
 var _runBundleInstall = _interopRequireDefault(require("./runBundleInstall"));
+var _pods = require("./pods");
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
@@ -43,6 +44,18 @@ async function runPodInstall(loader, options) {
     loader.start(`Installing CocoaPods dependencies ${_chalk().default.bold((options === null || options === void 0 ? void 0 : options.newArchEnabled) ? 'with New Architecture' : '')} ${_chalk().default.dim('(this may take a few minutes)')}`);
-    await (0, _execa().default)('bundle', ['exec', 'pod', 'install'], {
+    await (0, _pods.execaPod)(['install'], {
       env: {
         RCT_NEW_ARCH_ENABLED: (options === null || options === void 0 ? void 0 : options.newArchEnabled) ? '1' : '0',
-        RCT_IGNORE_PODS_DEPRECATION: '1' // From React Native 0.79 onwards, users shouldn't install CocoaPods manually.
+        RCT_IGNORE_PODS_DEPRECATION: '1',
+        // From React Native 0.79 onwards, users shouldn't install CocoaPods manually.
+        ...(process.env.USE_THIRD_PARTY_JSC && {
+          USE_THIRD_PARTY_JSC: process.env.USE_THIRD_PARTY_JSC
+        }),
+        // This is used to install the third party JSC.
+        ...(process.env.RCT_USE_RN_DEP && {
+          RCT_USE_RN_DEP: process.env.RCT_USE_RN_DEP
+        }),
+        // prebuilt RN dep available from 0.80 onwards
+        ...(process.env.RCT_USE_PREBUILT_RNCORE && {
+          RCT_USE_PREBUILT_RNCORE: process.env.RCT_USE_PREBUILT_RNCORE
+        }) // whole RN core prebuilt from 0.81 onwards
       }
@@ -80,3 +93,3 @@ });
     loader.start(`Updating CocoaPods repositories ${_chalk().default.dim('(this may take a few minutes)')}`);
-    await (0, _execa().default)('pod', ['repo', 'update']);
+    await (0, _pods.execaPod)(['repo', 'update']);
   } catch (error) {
@@ -131,3 +144,3 @@ // "pod" command outputs errors to stdout (at least some of them)
       // with a failure
-      await (0, _execa().default)('pod', ['--version']);
+      await (0, _pods.execaPod)(['--version']);
     } catch (e) {
@@ -134,0 +147,0 @@ loader.info();

build/tools/pods.d.ts

 import { DependencyConfig } from '@react-native-community/cli-types';
 import { ApplePlatform } from '../types';
+import execa from 'execa';
 interface ResolvePodsOptions {
@@ -15,3 +16,4 @@ forceInstall?: boolean;
 export default function resolvePods(root: string, sourceDir: string, nativeDependencies: NativeDependencies, platformName: ApplePlatform, reactNativePath: string, options?: ResolvePodsOptions): Promise<void>;
+export declare function execaPod(args: string[], options?: execa.Options): Promise<execa.ExecaReturnValue<string>>;
 export {};
 //# sourceMappingURL=pods.d.ts.map

build/tools/pods.js

@@ -9,2 +9,3 @@ "use strict";
 exports.dependenciesToString = dependenciesToString;
+exports.execaPod = execaPod;
 exports.generateMd5Hash = generateMd5Hash;
@@ -49,2 +50,9 @@ exports.getPlatformDependencies = getPlatformDependencies;
 var _runCodegen = _interopRequireDefault(require("./runCodegen"));
+function _execa() {
+  const data = _interopRequireDefault(require("execa"));
+  _execa = function () {
+    return data;
+  };
+  return data;
+}
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
@@ -151,3 +159,30 @@ function getPackageJson(root) {
 }
+async function execaPod(args, options) {
+  let podType = 'system';
+  try {
+    // try bundle pod first
+    await (0, _execa().default)('bundle', ['exec', 'pod', '--version'], options);
+    podType = 'bundle';
+  } catch (bundlePodError) {
+    // try to install bundle pod
+    try {
+      await (0, _execa().default)('bundle', ['install']);
+      await (0, _execa().default)('bundle', ['exec', 'pod', '--version'], options);
+      podType = 'bundle';
+    } catch (bundleInstallError) {
+      // fall back to system pod
+      try {
+        await (0, _execa().default)('pod', ['--version'], options);
+        podType = 'system';
+      } catch (systemPodError) {
+        throw new Error('cocoapods not installed');
+      }
+    }
+  }
+  if (podType === 'bundle') {
+    return (0, _execa().default)('bundle', ['exec', 'pod', ...args], options);
+  }
+  return (0, _execa().default)('pod', args, options);
+}
 
 //# sourceMappingURL=/Users/thymikee/Developer/rnccli/packages/cli-config-apple/build/tools/pods.js.map

package.json

 {
   "name": "@react-native-community/cli-config-apple",
-  "version": "20.0.0",
+  "version": "20.0.1",
   "license": "MIT",
@@ -10,3 +10,3 @@ "main": "build/index.js",
   "dependencies": {
-    "@react-native-community/cli-tools": "20.0.0",
+    "@react-native-community/cli-tools": "20.0.1",
     "chalk": "^4.1.2",
@@ -17,3 +17,3 @@ "execa": "^5.0.0",
   "devDependencies": {
-    "@react-native-community/cli-types": "20.0.0",
+    "@react-native-community/cli-types": "20.0.1",
     "ora": "^5.4.1"
@@ -32,3 +32,3 @@ },
   },
-  "gitHead": "eea99b9af0d7a73b4f189dec20f20c03ecfc7574"
+  "gitHead": "d9ee06a0838be084548228ad6eed23c98a76b3af"
 }

New alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

86071

5.68%

Lines of code

925

5.71%

Worsened metrics

Number of low supply chain risk alerts

13

85.71%

Dependency changes

• + Added

  @react-native-community/cli-tools@20.0.1
  (transitive)

• - Removed

  @react-native-community/cli-tools@20.0.0
  (transitive)

• Updated

  @react-native-community/cli-tools@20.0.1