@tangible/roller
Advanced tools
+27
-15
@@ -29,2 +29,5 @@ /** | ||
| const args = process.argv.slice(2) | ||
| const skipConfirm = args.indexOf('-y') >= 0 | ||
| const { rootDir } = config | ||
@@ -46,3 +49,6 @@ const { | ||
| const childConfigPath = path.join(rootDir, childConfig) | ||
| const relativeChildRootPath = path.relative(rootDir, path.dirname(childConfigPath)) | ||
| const relativeChildRootPath = path.relative( | ||
| rootDir, | ||
| path.dirname(childConfigPath), | ||
| ) | ||
@@ -66,3 +72,5 @@ /** | ||
| src.push(...(configJson?.archive?.src ?? []).map(relativeToChildFolder)) | ||
| exclude.push(...(configJson?.archive?.exclude ?? []).map(relativeToChildFolder)) | ||
| exclude.push( | ||
| ...(configJson?.archive?.exclude ?? []).map(relativeToChildFolder), | ||
| ) | ||
| } | ||
@@ -94,18 +102,20 @@ | ||
| function waitKeyPressed() { | ||
| return new Promise((resolve) => { | ||
| // const wasRaw = process.stdin.isRaw | ||
| // process.stdin.setRawMode(true) // Single key press instead of line | ||
| process.stdin.resume() | ||
| process.stdin.once('data', (data) => { | ||
| process.stdin.pause() | ||
| // process.stdin.setRawMode(wasRaw) | ||
| resolve(data.toString()) | ||
| if (!skipConfirm) { | ||
| function waitKeyPressed() { | ||
| return new Promise((resolve) => { | ||
| // const wasRaw = process.stdin.isRaw | ||
| // process.stdin.setRawMode(true) // Single key press instead of line | ||
| process.stdin.resume() | ||
| process.stdin.once('data', (data) => { | ||
| process.stdin.pause() | ||
| // process.stdin.setRawMode(wasRaw) | ||
| resolve(data.toString()) | ||
| }) | ||
| }) | ||
| }) | ||
| } | ||
| console.log('Press enter to continue, or CTRL + C to stop') | ||
| await waitKeyPressed() | ||
| } | ||
| console.log('Press enter to continue, or CTRL + C to stop') | ||
| await waitKeyPressed() | ||
| /** | ||
@@ -137,2 +147,4 @@ * https://github.com/fpsqdb/zip-lib | ||
| }) | ||
| console.log('Wrote', dest) | ||
| } |
+1
-1
| { | ||
| "name": "@tangible/roller", | ||
| "type": "module", | ||
| "version": "2.1.2", | ||
| "version": "2.1.3", | ||
| "description": "Build project assets using Rollup and ESBuild", | ||
@@ -6,0 +6,0 @@ "homepage": "https://github.com/tangibleinc/tangible-roller", |
Network access
Supply chain riskThis module accesses the network.
Found 3 instances in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 3 instances in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
211146
0.09%6001
0.17%