@sentry/cli - npm Package Compare versions

Comparing version 2.22.2 to 2.22.3

checksums.txt

@@ -1,9 +0,9 @@
-sentry-cli-Darwin-arm64=27c7e9df15df2b3aea2a1fde8d3b3ccd382c625a02df3bf7fff7f4a3b77b8247
-sentry-cli-Darwin-universal=a07140b9c0230701b32e2039084c15dad4dc3b0adf7bad9786d4d0c7e6e5f2b6
-sentry-cli-Darwin-x86_64=9825f21f7322cfe64643210e80fa109741d36a3fdafc2209f5c42f83035d0ac7
-sentry-cli-Linux-aarch64=2735553ddd4de44fc454980636284b3e5a25de17bafcef640d1d898d3952180c
-sentry-cli-Linux-armv7=d25a58b53616381874ed6cf6a0d4317d7131073127d373358e7a2a5d4c5056f6
-sentry-cli-Linux-i686=9aa8680694b87c4853ff14d62c16155c2a553d155ab83fe509957c77e53cd266
-sentry-cli-Linux-x86_64=4a7dc4070df29fc8b540f1be579a9d4b01ed7d4e8993a8d2486149d7fbe3b951
-sentry-cli-Windows-i686.exe=7e87aa1e5ec3755fda118daea4e79f92df7570e53d7e75f8025f10449977ff75
-sentry-cli-Windows-x86_64.exe=027fb424da429b319d04b42452cd3cfaeb52922578f5f0ca113a9ad83332b99b
+sentry-cli-Darwin-arm64=496312273d95ea2bb85cfca442fd1636f2274dabd93ebc994817d235920ad9ca
+sentry-cli-Darwin-universal=e27a32541fb11c37e20b8c83407786e80a3593d332101c5c31be9eb80589cf31
+sentry-cli-Darwin-x86_64=95cbe9aab651d5b097da13c56b0cf30acabe68a8bd5ecc6bd6ec42e60b2a645a
+sentry-cli-Linux-aarch64=ef5d6fcb95a14714bbf401b2685c296efb192b5761ad2dedff2af06fd732cc5d
+sentry-cli-Linux-armv7=c34fde9660e8f7b7213e79882749555e4bc28675c5357153cba74dd30602da87
+sentry-cli-Linux-i686=c621b6a63418d70a5d5bd8ead2b0df54b4eaa0b04efbd4099982304cec82aaf2
+sentry-cli-Linux-x86_64=bcc68cd1de631cbeee481d42391c6646e5fc974293fd3c08fb9e6425077138c9
+sentry-cli-Windows-i686.exe=6a78560f1189d44205cb5d5f39e8e15323175b83ea4e98964521e7b0c8bcbf71
+sentry-cli-Windows-x86_64.exe=377a9978a25bbf80dca1cc8a186466ee1e50e2b3f476e21158be51f54de02242

js/helper.js

 'use strict';
 
 const os = require('os');
-const path = require('path');
 const childProcess = require('child_process');
@@ -83,10 +82,2 @@
 
-  if (!process.env.USE_SENTRY_BINARY_NPM_DISTRIBUTION) {
-    const parts = [];
-    parts.push(__dirname);
-    parts.push('..');
-    parts.push(`sentry-cli${process.platform === 'win32' ? '.exe' : ''}`);
-    return path.resolve(...parts);
-  }
-
   const { packageName, subpath } = getDistributionForThisPlatform();
@@ -145,3 +136,5 @@
  * @param {string} mockPath The new path to the mock sentry-cli binary
+ * @deprecated This was used in tests internally and will be removed in the next major version.
  */
+// TODO(v3): Remove this function
 function mockBinaryPath(mockPath) {
@@ -148,0 +141,0 @@ binaryPath = mockPath;

package.json

 {
   "name": "@sentry/cli",
-  "version": "2.22.2",
+  "version": "2.22.3",
   "description": "A command line utility to work with Sentry. https://docs.sentry.io/hosted/learn/cli/",
@@ -30,15 +30,14 @@ "repository": "git://github.com/getsentry/sentry-cli.git",
     "npm-run-all": "^4.1.5",
-    "prettier": "^2.6.2"
+    "prettier": "2.8.8"
   },
   "optionalDependencies": {
-    "@sentry/cli-darwin": "2.22.2",
-    "@sentry/cli-linux-arm": "2.22.2",
-    "@sentry/cli-linux-arm64": "2.22.2",
-    "@sentry/cli-linux-i686": "2.22.2",
-    "@sentry/cli-linux-x64": "2.22.2",
-    "@sentry/cli-win32-i686": "2.22.2",
-    "@sentry/cli-win32-x64": "2.22.2"
+    "@sentry/cli-darwin": "2.22.3",
+    "@sentry/cli-linux-arm": "2.22.3",
+    "@sentry/cli-linux-arm64": "2.22.3",
+    "@sentry/cli-linux-i686": "2.22.3",
+    "@sentry/cli-linux-x64": "2.22.3",
+    "@sentry/cli-win32-i686": "2.22.3",
+    "@sentry/cli-win32-x64": "2.22.3"
   },
   "scripts": {
-    "install": "node ./scripts/install.js",
     "fix": "npm-run-all fix:eslint fix:prettier",
@@ -62,5 +61,5 @@ "fix:eslint": "eslint --fix bin/* scripts/**/*.js js/**/*.js",
   "volta": {
-    "node": "10.24.1",
+    "node": "20.10.0",
     "yarn": "1.22.19"
   }
 }

scripts/install.js

@@ -5,4 +5,9 @@ #!/usr/bin/env node
 
+// TODO(v3): Remove this file
+
+console.log(
+  'DEPRECATION NOTICE: The Sentry CLI install script has been deprecated. The package now uses "optionalDependencies" instead to install architecture-compatible binaries distributed over npm.'
+);
+
 const fs = require('fs');
-const http = require('http');
 const os = require('os');
@@ -307,3 +312,3 @@ const path = require('path');
   const version = output.replace('sentry-cli ', '').trim();
-  const expected = process.env.SENTRYCLI_LOCAL_CDNURL ? 'DEV' : pkgInfo.version;
+  const expected = pkgInfo.version;
   if (version !== expected) {
@@ -314,17 +319,2 @@ throw new Error(`Unexpected sentry-cli version "${version}", expected "${expected}"`);
 
-if (process.env.SENTRYCLI_LOCAL_CDNURL) {
-  // For testing, mock the CDN by spawning a local server
-  const server = http.createServer((request, response) => {
-    const contents = fs.readFileSync(path.join(__dirname, '../js/__mocks__/sentry-cli'));
-    response.writeHead(200, {
-      'Content-Type': 'application/octet-stream',
-      'Content-Length': String(contents.byteLength),
-    });
-    response.end(contents);
-  });
-
-  server.listen(8999);
-  process.on('exit', () => server.close());
-}
-
 if (process.env.SENTRYCLI_SKIP_DOWNLOAD === '1') {
@@ -331,0 +321,0 @@ logger.log(`Skipping download because SENTRYCLI_SKIP_DOWNLOAD=1 detected.`);

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Number of high supply chain risk alerts

0

decreased by-100%

Number of low supply chain risk alerts

22

decreased by-12%

Number of medium supply chain risk alerts

3

decreased by-25%

Worsened metrics

Total package byte prevSize

61240

decreased by-0.84%

Lines of code

1206

decreased by-1.31%

No dependency changes