@stackaid/stackaid-json-generator - npm Package Compare versions

Comparing version 1.9.2 to 1.9.3

dist/cjs/go.js

@@ -28,3 +28,3 @@ "use strict";
 const listDirectDeps = (dir, sourceDir) => {
-    let output = (0, child_process_1.execSync)(`go list -f '{{if not .Indirect}}{{.}}{{end}}' -m all`, { cwd: path_1.default.resolve(sourceDir, dir) }).toString();
+    let output = (0, child_process_1.execSync)(`go list -f '{{if not .Indirect}}{{.}}{{end}}' -m all`, { cwd: path_1.default.resolve(sourceDir, dir), maxBuffer: 1024 * 1024 * 10 }).toString();
     return output
@@ -42,2 +42,3 @@ .split('\n')
         cwd: path_1.default.resolve(sourceDir, dir),
+        maxBuffer: 1024 * 1024 * 10,
     }).toString();
@@ -44,0 +45,0 @@ const graph = {};

dist/cjs/queries.js

@@ -83,3 +83,4 @@ "use strict";
             return __awaiter(this, void 0, void 0, function* () {
-                const result = (yield this.graphql(`
+                try {
+                    const result = (yield this.graphql(`
           query getRepositorySummary(
@@ -103,4 +104,10 @@ $owner: String!
         `, { repo, owner, cursor }));
-                const { dependencyGraphManifests: { edges }, } = result.repository;
-                return edges;
+                    const { dependencyGraphManifests: { edges }, } = result.repository;
+                    return edges;
+                }
+                catch (e) {
+                    // Typically happens when repo cannot be found
+                    console.log(e);
+                    return [];
+                }
             });
@@ -107,0 +114,0 @@ },

dist/esm/go.js

@@ -22,3 +22,3 @@ import lodash from 'lodash';
 export const listDirectDeps = (dir, sourceDir) => {
-    let output = execSync(`go list -f '{{if not .Indirect}}{{.}}{{end}}' -m all`, { cwd: path.resolve(sourceDir, dir) }).toString();
+    let output = execSync(`go list -f '{{if not .Indirect}}{{.}}{{end}}' -m all`, { cwd: path.resolve(sourceDir, dir), maxBuffer: 1024 * 1024 * 10 }).toString();
     return output
@@ -35,2 +35,3 @@ .split('\n')
         cwd: path.resolve(sourceDir, dir),
+        maxBuffer: 1024 * 1024 * 10,
     }).toString();
@@ -37,0 +38,0 @@ const graph = {};

dist/esm/queries.js

@@ -68,3 +68,4 @@ import lodash from 'lodash';
         async getRepositorySummaryPage(owner, repo, cursor = '') {
-            const result = (await this.graphql(`
+            try {
+                const result = (await this.graphql(`
           query getRepositorySummary(
@@ -88,4 +89,10 @@ $owner: String!
         `, { repo, owner, cursor }));
-            const { dependencyGraphManifests: { edges }, } = result.repository;
-            return edges;
+                const { dependencyGraphManifests: { edges }, } = result.repository;
+                return edges;
+            }
+            catch (e) {
+                // Typically happens when repo cannot be found
+                console.log(e);
+                return [];
+            }
         },
@@ -92,0 +99,0 @@ async getRepositorySummary(owner, repo, glob = '') {

package.json

 {
   "name": "@stackaid/stackaid-json-generator",
-  "version": "1.9.2",
+  "version": "1.9.3",
   "private": false,
@@ -5,0 +5,0 @@ "description": "Generate a stackaid.json file based on your repository's dependency graph",

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

URL strings

Supply chain risk

Package contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2430254

0.02%

Lines of code

52244

0.03%

No dependency changes