@yao-pkg/pkg-fetch - npm Package Compare versions

Comparing version 3.5.4 to 3.5.5

lib-es5/expected-shas.json

@@ -13,22 +13,22 @@ {
     "node-v14.21.3-win-x64": "cb2a0bf3e063a2bc6b66a4894e6a57d334922c4bb3a337157764fd914d616666",
-    "node-v16.19.1-alpine-arm64": "f1a885c21209a36b33bcfd6ff7c85291743c60ee544c2053926411b0a4b4bec7",
-    "node-v16.19.1-alpine-x64": "bef60218452ce798b53994686130f1a5d96866afbe5ca4368da4cd3c5aab8cea",
-    "node-v16.19.1-linux-arm64": "f45246c7727699b4cb00f3c541aa0d8d6523a5cd90f1e1775b2e4ebe845ff908",
-    "node-v16.19.1-linux-x64": "c37899a0bbe8975656352e8ef9d1dd221824c44dd65df979fcbfc51d87113527",
-    "node-v16.19.1-linuxstatic-arm64": "84c2f49721187f3125e1ddd2356946bcf751d8cf9f09cd0a8cb4d2d8f199f30e",
-    "node-v16.19.1-linuxstatic-armv7": "679ad611b332a370cc2b8ec109440a6eaf14602e4d248eec383d0ab52009b54f",
-    "node-v16.19.1-linuxstatic-x64": "e59674a9554670c8f88550a55a725cc26deb7ca725ceffa612f657318c5a8344",
-    "node-v16.19.1-macos-x64": "12764d7200f00b99f21e0c71191c72eeb183c34faf64782980250dea55fecb49",
-    "node-v16.19.1-win-arm64": "22e5566d30d713ad37d3d4d189db830dd733efeb4e7b07c0d79632004aa0f452",
-    "node-v16.19.1-win-x64": "9f06f3d73f8899bb623332b0b4acbca4e0334bd018418fddeb3ad0a1732089fe",
-    "node-v18.15.0-alpine-arm64": "653d37fc5439e88ea72f9850e9e96ce350859fe55862d4683674d9346910678f",
-    "node-v18.15.0-alpine-x64": "4ba3847103cc77b1273a7bfe9378a2101a29174f06a4c6ae8cba8e6d865ccf30",
-    "node-v18.15.0-linux-arm64": "e359e10093724a879d7e741cdebf956091cf6ccd6236922a2a93e554fcb15a05",
-    "node-v18.15.0-linux-x64": "572841f31299e86d0b9c287d08801b267925dd8e592c17f42914ceddb9808b5f",
-    "node-v18.15.0-linuxstatic-arm64": "b0aa63bb88865568bc9192729f338c4573d901459cca2b0911e399b55ef9d953",
-    "node-v18.15.0-linuxstatic-armv7": "5d73c5f32605a298fd0c35fad77776fb47aa25fe37bc7bfc46ca2e812133f089",
-    "node-v18.15.0-linuxstatic-x64": "ddba2643b852320d604d309e562aec9dfaae2bc0d300acd83aa664d56eb28758",
-    "node-v18.15.0-macos-x64": "ddb91200857a332d12ab2380ed2c6d962b610708e51492dcc2a7b9b64c5b7875",
-    "node-v18.15.0-win-arm64": "4b9527f962a2bc00216d4967dd5467210123cf0f6923df5067c97ce2d9cacbb5",
-    "node-v18.15.0-win-x64": "a0c8d451e3f2e863b09d0937e55fe912d5094136e070249ecb0cf5ad4ac57911",
+    "node-v16.20.2-alpine-arm64": "a30cc9be5472dc0f66bf859669c742c6a47f66973c82bea0e7605c357079c8d5",
+    "node-v16.20.2-alpine-x64": "171381ff415321dede24c5883003a1c07301a4d7bf44aeb0ef4e72b7f78c3202",
+    "node-v16.20.2-linux-arm64": "12c175838b4e76dabf67f0668dbfa0889ce80aca35a5866635a3a42664cbba22",
+    "node-v16.20.2-linux-x64": "b8ad09f0fccf5341dc459056096aa6d413d278ca3e939e42a29e6fbaa149ca50",
+    "node-v16.20.2-linuxstatic-arm64": "fa6ecba685dbdd0e1a1e3a9cb7db07dc558f422a0b53baf3834b855c422a2a3a",
+    "node-v16.20.2-linuxstatic-armv7": "a8c63fb9523ad44fe59329ba02dba2936da4b9adc7d4238e7180f15031cb1cff",
+    "node-v16.20.2-linuxstatic-x64": "1a136b7c97c56a90e48d51683ca9181e53e750928a439a88da185c0d7917e432",
+    "node-v16.20.2-macos-x64": "cd60ba35e3305519ce4ce6398897a1c9e9e68a14c170325d9ece8d078775b3f9",
+    "node-v16.20.2-win-arm64": "7514915e02aedfbdc9f87ede04f1f251b014e312e3e184d5b94b42aeb28c2485",
+    "node-v16.20.2-win-x64": "272729724993ce07b37d328718a0152e50ec5c9d27aa972975c09b75604c0dca",
+    "node-v18.18.2-alpine-arm64": "244a74549a342ed74b531625c02168e1c0e72f328d8b8d53ab143a6813fd9466",
+    "node-v18.18.2-alpine-x64": "b9c6d08f510ce15353d9f2441b5b096697c877b1760a6f526c203b47bf3ec83a",
+    "node-v18.18.2-linux-arm64": "01676c5420d17a2fa53ddf4573ca21895150ae317cd54a7e26234c26d3603e7a",
+    "node-v18.18.2-linux-x64": "d918fd7ad7d9db0cde09c570ada58a6fb9e2bf43c032a9cb87d0e572f06db646",
+    "node-v18.18.2-linuxstatic-arm64": "2db35ca7c089fc78a8c6b44804a88aa1035344a7465b038f593cc337198285a6",
+    "node-v18.18.2-linuxstatic-armv7": "705c75ab9155069ffb8c3f800f8d49121d2b0d07343e4da9a98477e2962602f9",
+    "node-v18.18.2-linuxstatic-x64": "dce8f6c6f3ce48b4bbfb7a8177165c9743dba12458ccd42b9f3da3c9601fc088",
+    "node-v18.18.2-macos-x64": "db04d8a9338e1d2f6afd53c99d0a57ec9cc4bca84165ade0d2f5fcf9871bcdb9",
+    "node-v18.18.2-win-arm64": "ca08e24dfd5bae1a898d86f3241287e057c14e7fce37da1dff63f1bce6822b62",
+    "node-v18.18.2-win-x64": "81b25a5dc71bb3ebc8219f4cd73ad598a1eaff16ccbb2f75cf8f5db94e08149b",
     "node-v19.8.1-alpine-arm64": "7d4fc8a17f116d6e77b6011201797897592fa03380e939fa8b49b00ba7ac641b",
@@ -35,0 +35,0 @@ "node-v19.8.1-alpine-x64": "aca5632e1960d763c7b9914ebfeb929c4ca0e8c2112798eca3959ba9a5076ed8",

lib-es5/places.js

@@ -21,2 +21,5 @@ "use strict";
     var binDir;
+    if (process.env.PKG_NODE_PATH) {
+        return path_1.default.resolve(process.env.PKG_NODE_PATH);
+    }
     if (output) {
@@ -23,0 +26,0 @@ binDir = path_1.default.resolve(output);

lib-es5/verify.js

@@ -42,3 +42,3 @@ "use strict";
 var utils_1 = require("./utils");
-var script = "\n  var vm = require('vm');\n  var assert = require('assert');\n  var text = '(function () { return 42; })';\n  var cd, fn, result;\n  var modules = process.versions.modules | 0;\n  var v8 = process.versions.v8.split('.').slice(0, 2).join('.');\n\n  var s1 = new vm.Script(text, { filename: 's1', produceCachedData: true, sourceless: true });\n  assert(s1.cachedDataProduced);\n  cd = s1.cachedData;\n\n  var kCpuFeaturesOffset, cpuFeatures;\n\n  if (modules === 14) {\n  } else\n  if (modules === 46 || modules === 48 || modules === 51) {\n    kCpuFeaturesOffset = 0x0c;\n  } else\n  if (modules === 57) {\n    if (v8 === '6.2') {\n      kCpuFeaturesOffset = 0x0c;\n    } else\n    if (v8 === '5.8') {\n      kCpuFeaturesOffset = 0x0c;\n    } else {\n      kCpuFeaturesOffset = 0x10;\n    }\n  } else\n  if (modules === 59) {\n    kCpuFeaturesOffset = 0x0c;\n  } else\n  if (modules === 64) {\n    kCpuFeaturesOffset = 0x0c;\n  } else\n  if (modules === 72) {\n    // no cpu features anymore\n  } else\n  if (modules === 79) {\n    // no cpu features anymore\n  } else\n  if (modules === 83) {\n    // no cpu features anymore\n  } else {\n    assert(false, modules);\n  }\n\n  if (modules >= 46 && // no cpu_features field in 0.12\n      process.arch !== 'arm' && // non-zero features even in sourceless mode in arm\n      modules < 72) { // no cpu_features field in 12+\n    cpuFeatures = cd.readUInt32LE(kCpuFeaturesOffset);\n    assert(cpuFeatures === 0, 'CPU_FEATURES must be zero');\n  }\n\n  var s2 = new vm.Script(undefined, { filename: 's2', cachedData: cd, sourceless: true });\n  fn = s2.runInThisContext();\n  result = fn();\n  assert.equal(result, 42);\n\n  if (modules === 14) {\n  } else\n  if (modules === 46 || modules === 48 ||\n      modules === 51 || modules === 57 || modules === 59 || modules === 64) {\n    var paddedPayloadOffset = 0x48; // see SerializedCodeData::Payload()\n    var index = paddedPayloadOffset + 10;\n    cd[index] ^= 0xf0;\n    var s3 = new vm.Script(undefined, { filename: 's3', cachedData: cd, sourceless: true });\n    assert(s3.cachedDataRejected, 's3.cachedDataRejected must be true');\n  } else\n  if (modules === 72) {\n  } else\n  if (modules === 79) {\n  } else\n  if (modules === 83) {\n  } else {\n    assert(false, modules);\n  }\n\n  var s4 = new vm.Script(text, { filename: 's4', produceCachedData: true });\n  assert(s4.cachedDataProduced, 's4.cachedDataProduced must be true');\n  cd = s4.cachedData;\n\n  if (modules >= 46 && // no cpu_features field in 0.12\n      process.arch !== 'arm' && // zero features even in non-sourceless mode in arm\n      modules < 72) { // no cpu_features field in 12+\n    cpuFeatures = cd.readUInt32LE(kCpuFeaturesOffset);\n    assert(cpuFeatures !== 0, 'CPU_FEATURES must be non-zero');\n  }\n\n  console.log('ok');\n";
+var script = "\n  var vm = require('vm');\n  var assert = require('assert');\n  var text = '(function () { return 42; })';\n  var cd, fn, result;\n  var modules = process.versions.modules | 0;\n  var v8 = process.versions.v8.split('.').slice(0, 2).join('.');\n\n  var s1 = new vm.Script(text, { filename: 's1', produceCachedData: true, sourceless: true });\n  assert(s1.cachedDataProduced);\n  cd = s1.cachedData;\n\n  var kCpuFeaturesOffset, cpuFeatures;\n\n  if (modules === 14) {\n  } else\n  if (modules === 46 || modules === 48 || modules === 51) {\n    kCpuFeaturesOffset = 0x0c;\n  } else\n  if (modules === 57) {\n    if (v8 === '6.2') {\n      kCpuFeaturesOffset = 0x0c;\n    } else\n    if (v8 === '5.8') {\n      kCpuFeaturesOffset = 0x0c;\n    } else {\n      kCpuFeaturesOffset = 0x10;\n    }\n  } else\n  if (modules === 59) {\n    kCpuFeaturesOffset = 0x0c;\n  } else\n  if (modules === 64) {\n    kCpuFeaturesOffset = 0x0c;\n  } else\n  if (modules === 72) {\n    // no cpu features anymore\n  } else\n  if (modules === 79) {\n    // no cpu features anymore\n  } else\n  if (modules === 83) {\n    // no cpu features anymore\n  } else\n  if (modules === 93) {\n    // no cpu features anymore\n  } else\n  if (modules === 108) {\n    // no cpu features anymore\n  } else\n  if (modules === 111) {\n    // no cpu features anymore\n  } else {\n    assert(false, modules);\n  }\n\n  if (modules >= 46 && // no cpu_features field in 0.12\n      process.arch !== 'arm' && // non-zero features even in sourceless mode in arm\n      modules < 72) { // no cpu_features field in 12+\n    cpuFeatures = cd.readUInt32LE(kCpuFeaturesOffset);\n    assert(cpuFeatures === 0, 'CPU_FEATURES must be zero');\n  }\n\n  var s2 = new vm.Script(undefined, { filename: 's2', cachedData: cd, sourceless: true });\n  fn = s2.runInThisContext();\n  result = fn();\n  assert.equal(result, 42);\n\n  if (modules === 14) {\n  } else\n  if (modules === 46 || modules === 48 ||\n      modules === 51 || modules === 57 || modules === 59 || modules === 64) {\n    var paddedPayloadOffset = 0x48; // see SerializedCodeData::Payload()\n    var index = paddedPayloadOffset + 10;\n    cd[index] ^= 0xf0;\n    var s3 = new vm.Script(undefined, { filename: 's3', cachedData: cd, sourceless: true });\n    assert(s3.cachedDataRejected, 's3.cachedDataRejected must be true');\n  } else\n  if (modules === 72) {\n  } else\n  if (modules === 79) {\n  } else\n  if (modules === 83) {\n  } else\n  if (modules === 93) {\n  } else\n  if (modules === 108) {\n  } else\n  if (modules === 111) {\n  } else {\n    assert(false, modules);\n  }\n\n  var s4 = new vm.Script(text, { filename: 's4', produceCachedData: true });\n  assert(s4.cachedDataProduced, 's4.cachedDataProduced must be true');\n  cd = s4.cachedData;\n\n  if (modules >= 46 && // no cpu_features field in 0.12\n      process.arch !== 'arm' && // zero features even in non-sourceless mode in arm\n      modules < 72) { // no cpu_features field in 12+\n    cpuFeatures = cd.readUInt32LE(kCpuFeaturesOffset);\n    assert(cpuFeatures !== 0, 'CPU_FEATURES must be non-zero');\n  }\n\n  console.log('ok');\n";
 function verify(local) {
@@ -45,0 +45,0 @@ return __awaiter(this, void 0, void 0, function () {

package.json

 {
   "name": "@yao-pkg/pkg-fetch",
-  "version": "3.5.4",
+  "version": "3.5.5",
   "description": "Compiles and stores base binaries for pkg",
@@ -5,0 +5,0 @@ "main": "lib-es5/index.js",

patches/patches.json

 {
   "v19.8.1": ["node.v19.8.1.cpp.patch"],
-  "v18.15.0": ["node.v18.15.0.cpp.patch"],
-  "v16.19.1": ["node.v16.19.1.cpp.patch"],
+  "v18.18.2": ["node.v18.18.2.cpp.patch"],
+  "v16.20.2": ["node.v16.20.2.cpp.patch"],
   "v14.21.3": ["node.v14.21.3.cpp.patch"],
@@ -6,0 +6,0 @@ "v12.22.11": ["node.v12.22.11.cpp.patch"],

README.md

@@ -118,1 +118,16 @@ A utility to fetch or build patched Node binaries used by [pkg](https://github.com/yao-pkg/pkg) to generate executables. This repo hosts prebuilt binaries in [Releases](https://github.com/yao-pkg/pkg-fetch/releases).
 `yarn start --node-range node18 --arch x64 --output dist`
+
+## Environment
+
+| Var              | Description                                                                                                  |
+| ---------------- | ------------------------------------------------------------------------------------------------------------ |
+| `PKG_BUILD_PATH` | Directory to use to clone and build nodejs binaries. Default to system temporary directory                   |
+| `PKG_CACHE_PATH` | Path to pkg-cache. Default to `~/.pkg-cache`                                                                 |
+| `PKG_IGNORE_TAG` | Ignore tag folder when checking local binary path                                                            |
+| `PKG_NODE_PATH`  | Custom path to the local nodejs binary to use                                                                |
+| `HTTPS_PROXY`    | Optional HTTPS proxy to use when fetching binaries                                                           |
+| `HTTP_PROXY`     | Optional HTTP proxy to use when fetching binaries                                                            |
+| `MAKE_JOB_COUNT` | Number of parallel jobs when building binaries (value passed to `make -j` option). Default to number of cpus |
+| `CFLAGS`         | Flags to use when invoking C compiler                                                                        |
+| `CXXFLAGS`       | Flags to use when invoking C++ compiler                                                                      |
+| `STRIP`          | Path to `strip` command. Default to `strip`                                                                  |

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

239387

increased by0.87%

Lines of code

1662

increased by0.24%

Number of lines in readme file

133

increased by12.71%

Worsened metrics

Number of low supply chain risk alerts

21

increased by10.53%

No dependency changes