@sentry-internal/node-native-stacktrace - npm Package Compare versions

Comparing version 0.2.2 to 0.2.3

package.json

 {
   "name": "@sentry-internal/node-native-stacktrace",
-  "version": "0.2.2",
+  "version": "0.2.3",
   "main": "lib/index.js",
@@ -35,3 +35,4 @@ "types": "lib/index.d.ts",
     "clean": "node-gyp clean && rm -rf lib && rm -rf build",
-    "test": "node ./test/prepare.mjs && vitest run --silent=false --disable-console-intercept"
+    "test": "yarn test:install && node ./test/prepare.mjs && vitest run --silent=false --disable-console-intercept",
+    "test:install": "cross-env ALWAYS_THROW=true yarn install"
   },
@@ -50,2 +51,3 @@ "engines": {
     "clang-format": "^1.8.0",
+    "cross-env": "^7.0.3",
     "eslint": "^7.0.0",
@@ -52,0 +54,0 @@ "node-gyp": "^11.2.0",

scripts/check-build.mjs

@@ -1,5 +0,8 @@
-import fs from 'fs';
-import child_process from 'child_process';
+import * as child_process from 'node:child_process';
+import * as fs from 'node:fs';
+import { createRequire } from 'node:module';
 import * as binaries from './binaries.mjs';
 
+const require = createRequire(import.meta.url);
+
 function clean(err) {
@@ -35,7 +38,11 @@ return err.toString().trim();
   try {
-    await import(binaries.target);
+    require(binaries.target);
     console.log('Precompiled binary found, skipping build from source.');
   } catch (e) {
     console.log('Precompiled binary found but failed loading');
-    console.log(e);
+    if (process.env.ALWAYS_THROW) {
+      throw e;
+    } else {
+      console.log(e);
+    }
     try {
@@ -42,0 +49,0 @@ recompileFromSource();

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Improved metrics

Total package byte prevSize

2488607

0.01%

Lines of code

312

1.96%

Worsened metrics

Dev dependency count

9

12.5%

Number of low supply chain risk alerts

14

27.27%

No dependency changes