@tangible/roller
Advanced tools
@@ -57,7 +57,9 @@ import path from 'path' | ||
| // Fallback to HTTPS instead of Git/SSH protocol | ||
| const fallbackGit = git.replace('git@github.com:', 'https://github.com/') | ||
| const fallbackGit = git | ||
| .replace('git@github.com:', 'https://github.com/') | ||
| .replace('git@bitbucket.org:', 'https://bitbucket.org/') | ||
| async function runWithFallback(command, givenOptions = {}) { | ||
| const options = { | ||
| cwd: givenOptions.cwd || parentPath, | ||
| cwd: givenOptions.cwd || parentPath | ||
| } | ||
@@ -74,3 +76,3 @@ // console.log('Running command in path', options.cwd) | ||
| console.log( | ||
| "Git did't work with SSH protocol. Trying fallback with HTTPS.", | ||
| "Git did't work with SSH protocol. Trying fallback with HTTPS." | ||
| ) | ||
@@ -92,3 +94,3 @@ const fallbackCommand = command.replace(git, fallbackGit) | ||
| await runWithFallback(`git pull --ff-only ${git} ${branch}`, { | ||
| cwd: targetPath, | ||
| cwd: targetPath | ||
| }) | ||
@@ -99,4 +101,4 @@ } else { | ||
| { | ||
| cwd: parentPath, | ||
| }, | ||
| cwd: parentPath | ||
| } | ||
| ) | ||
@@ -139,3 +141,3 @@ } | ||
| await fs.rm(targetPath, { | ||
| recursive: true, | ||
| recursive: true | ||
| }) | ||
@@ -142,0 +144,0 @@ } |
+2
-3
@@ -14,4 +14,3 @@ import path from 'path' | ||
| const configJsFileName = 'tangible.config.js' | ||
| let configJsFileName = 'tangible.config.js' | ||
| let configJsPath = path.join(rootDir, configJsFileName) | ||
@@ -26,3 +25,3 @@ | ||
| // Child project directory | ||
| const customConfigJsPath = path.join(rootDir, name, configJsFileName) | ||
| let customConfigJsPath = path.join(rootDir, name, configJsFileName) | ||
@@ -29,0 +28,0 @@ if (fs.existsSync(customConfigJsPath)) { |
+1
-1
| { | ||
| "name": "@tangible/roller", | ||
| "type": "module", | ||
| "version": "2.1.4", | ||
| "version": "2.1.5", | ||
| "description": "Build project assets using Rollup and ESBuild", | ||
@@ -6,0 +6,0 @@ "homepage": "https://github.com/tangibleinc/tangible-roller", |
+6
-1
@@ -130,3 +130,6 @@ import path from 'path' | ||
| // Provide default aliases for Preact | ||
| /** | ||
| * Provide aliases for Preact | ||
| * https://preactjs.com/guide/v10/getting-started/#aliasing-in-rollup | ||
| */ | ||
| if (reactMode === 'preact' && !aliases.react) { | ||
@@ -136,2 +139,4 @@ Object.assign(aliases, { | ||
| 'react-dom': 'preact/compat', | ||
| 'react-dom/test-utils': 'preact/test-utils', | ||
| 'react/jsx-runtime': 'preact/jsx-runtime', | ||
| }) | ||
@@ -138,0 +143,0 @@ } |
Network access
Supply chain riskThis module accesses the network.
Found 3 instances in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
Network access
Supply chain riskThis module accesses the network.
Found 3 instances in 1 package
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 3 instances in 1 package
Long strings
Supply chain riskContains long string literals, which may be a sign of obfuscated or packed code.
Found 1 instance in 1 package
URL strings
Supply chain riskPackage contains fragments of external URLs or IP addresses, which the package may be accessing at runtime.
Found 1 instance in 1 package
211918
0.11%6023
0.12%