@vscode/sudo-prompt - npm Package Compare versions

Comparing version 9.3.1 to 9.3.2

index.js

@@ -24,2 +24,10 @@ var Node = {
 
+function isObject(arg) {
+  return arg !== null && typeof arg === 'object';
+}
+
+function isFunction(arg) {
+  return typeof arg === 'function';
+}
+
 function Exec() {
@@ -36,5 +44,5 @@ if (arguments.length < 1 || arguments.length > 3) {
   if (arguments.length === 2) {
-    if (Node.util.isObject(arguments[1])) {
+    if (isObject(arguments[1])) {
       options = arguments[1];
-    } else if (Node.util.isFunction(arguments[1])) {
+    } else if (isFunction(arguments[1])) {
       end = arguments[1];
@@ -45,3 +53,3 @@ } else {
   } else if (arguments.length === 3) {
-    if (Node.util.isObject(arguments[1])) {
+    if (isObject(arguments[1])) {
       options = arguments[1];
@@ -51,3 +59,3 @@ } else {
     }
-    if (Node.util.isFunction(arguments[2])) {
+    if (isFunction(arguments[2])) {
       end = arguments[2];
@@ -54,0 +62,0 @@ } else {

package.json

 {
   "name": "@vscode/sudo-prompt",
-  "version": "9.3.1",
+  "version": "9.3.2",
   "description": "Run a command using sudo, prompting the user with an OS dialog if necessary",
@@ -18,3 +18,3 @@ "main": "index.js",
     "type": "git",
-    "url": "git+https://github.com/bpasero/sudo-prompt.git"
+    "url": "git+https://github.com/microsoft/vscode-sudo-prompt.git"
   },
@@ -38,6 +38,6 @@ "keywords": [
   "bugs": {
-    "url": "https://github.com/bpasero/sudo-prompt/issues"
+    "url": "https://github.com/microsoft/vscode-sudo-prompt/issues"
   },
-  "homepage": "https://github.com/bpasero/sudo-prompt#readme",
+  "homepage": "https://github.com/microsoft/vscode-sudo-prompt#readme",
   "scripts": {}
 }

README.md

@@ -5,2 +5,4 @@ # sudo-prompt
 
+**Note:** the origin of this work is at https://github.com/jorangreef/sudo-prompt and has been moved to https://github.com/microsoft/vscode-sudo-prompt for maintenance and use in VS Code as that original repository is archived by now.
+
 ## Cross-Platform
@@ -24,3 +26,3 @@ `sudo-prompt` provides a native OS dialog prompt on **macOS**, **Linux** and **Windows**.
 ```javascript
-var sudo = require('sudo-prompt');
+var sudo = require('@vscode/sudo-prompt');
 var options = {
@@ -27,0 +29,0 @@ name: 'Electron',

CHANGELOG.md

-## [9.3.1] 2021-11-19
-
-### Changed
-
-- Updated package.json metadata.
-
-## [9.3.0] 2021-11-17
-
-### Changed
-
-- Convert the macOS applet to be universal so that it can run without Rosetta 2 installed.
-
-- Add instructions how to update the macOS applet that is included in this library.
-
-## [9.2.0] 2020-04-29
-
-### Fixed
-
-- Update TypeScript types to accommodate recent changes, see
-[#117](https://github.com/jorangreef/sudo-prompt/issues/117).
-
-## [9.1.0] 2019-11-13
-
-### Added
-
-- Add TypeScript types.
-
-## [9.0.0] 2019-06-03
-
-### Changed
-
-- Make cross-platform `stdout`, `stderr` behavior consistent, see
-[#89](https://github.com/jorangreef/sudo-prompt/issues/89).
-
-- Preserve current working directory on all platforms.
-
-- Improve kdesudo dialog appearance.
-
-### Added
-
-- Add `options.env` to set environment variables on all platforms, see
-[#91](https://github.com/jorangreef/sudo-prompt/issues/91).
-
-### Fixed
-
-- Always return PERMISSION_DENIED as an Error object.
-
-- Support multiple commands separated by semicolons on Linux, see
-[#39](https://github.com/jorangreef/sudo-prompt/issues/39).
-
-- Distinguish between elevation errors and command errors on Linux, see
-[#88](https://github.com/jorangreef/sudo-prompt/issues/88).
-
-- Fix Windows to return `PERMISSION_DENIED` Error even when Windows' error
-messages are internationalized, see 
-[#96](https://github.com/jorangreef/sudo-prompt/issues/96).
-
-## [8.2.5] 2018-12-12
-
-### Fixed
-
-- Whitelist package.json files.
-
-## [8.2.4] 2018-12-12
-
-### Added
-
-- A CHANGELOG.md file, see
-[#78](https://github.com/jorangreef/sudo-prompt/issues/78).
-
-## [8.2.3] 2018-09-11
-
-### Fixed
-
-- README: Link to concurrency discussion.
-
-## [8.2.2] 2018-09-11
-
-### Fixed
-
-- README: Details on concurrency.
-
-## [8.2.1] 2018-09-11
-
-### Fixed
-
-- A rare idempotency edge case where a command might have been run more than
-once, given a very specific OS environment setup.
-
-## [8.2.0] 2018-03-22
-
-### Added
-
-- Windows: Fix `cd` when `cwd` is on another drive, see
-[#70](https://github.com/jorangreef/sudo-prompt/issues/70).
-
-## [8.1.0] 2018-01-10
-
-### Added
-
-- Linux: Increase `maxBuffer` limit to 128 MiB, see
-[#66](https://github.com/jorangreef/sudo-prompt/issues/66).
-
-## [8.0.0] 2018-11-02
-
-### Changed
-
-- Windows: Set code page of command batch script to UTF-8.
-
-## [7.1.1] 2017-07-18
-
-### Fixed
-
-- README: Explicitly mention that no child process is returned.
-
-## [7.0.0] 2017-03-15
-
-### Changed
-
-- Add status code to errors on Windows and macOS.
-
-## [6.2.1] 2016-12-16
-
-### Fixed
-
-- README: Syntax highlighting.
-
-## [6.2.0] 2016-08-17
-
-### Fixed
-
-- README: Rename OS X to macOS.
-
-## [6.1.0] 2016-08-02
-
-### Added
-
-- Yield an error if no polkit authentication agent is found, see
-[#29](https://github.com/jorangreef/sudo-prompt/issues/29).
-
-## [6.0.2] 2016-07-21
-
-### Fixed
-
-- README: Update explanation of Linux behavior.
-
-## [6.0.1] 2016-07-15
-
-### Fixed
-
-- Update keywords in package.json.
-
-## [6.0.0] 2016-07-15
-
-### Changed
-
-- Add support for Windows.

New alerts

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Lines of code

796

0.76%

Number of lines in readme file

65

3.17%

Number of low supply chain risk alerts

7

-12.5%

Worsened metrics

Total package byte prevSize

44790

-5.51%

Number of package files

7

-12.5%

Number of medium supply chain risk alerts

4

33.33%

No dependency changes