New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

@ziglang/cli

Package Overview
Dependencies
Maintainers
1
Versions
21
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@ziglang/cli - npm Package Compare versions

Comparing version
0.0.9
to
0.0.11
+1
-1
index.js

@@ -29,3 +29,3 @@ #!/usr/bin/env node

// const version = require('./package.json').version;
export const version = '0.10.0-dev.1301+cb3b1dd6d';
export const version = '0.11.0-dev.863+4809e0ea7';
export const extension = windows ? 'zip' : 'tar.xz';

@@ -32,0 +32,0 @@

{
"name": "@ziglang/cli",
"version": "0.0.9",
"version": "0.0.11",
"description": "",

@@ -25,3 +25,3 @@ "type": "module",

"dependencies": {
"zx": "^5.0.0"
"zx": "^6.0.7"
},

@@ -51,4 +51,3 @@ "keywords": [

"prepublish": "rm -rf bin && git checkout bin"
},
"readme": "# @ziglang/cli\n\nThis package serves as a wrapper for the Zig compiler CLI itself. It checks if Zig is installed system-wide, and otherwise detects the current platform, fetches the corresponding Zig binary, and installs it locally in your `node_modules` folder. This will be the typical scenario when setting up in a CI environment where Zig is not available.\n\nIf Zig is already installed, by default only a symlink to it will be created, no additional Zig package is installed. This will be the typical setup in development. If desired, the `zig-install` script can still be used to install a local version of Zig, regardless of any system-wide version.\n\n### Installing\n\n```sh\nnpm i -D @ziglang/cli # or yarn or pnpm\n```\n\n### Scripts\n\nAt the end of the `npm install` process, the `postinstall.js` script should run automatically, and install/symlink Zig (and other scripts) locally into your `./node_modules/.bin` folder:\n\n```sh\n./node_modules/.bin/zig # the actual zig binary/symlink once installed\n./node_modules/.bin/zig-install # installs zig locally\n./node_modules/.bin/zig-reinstall # reinstalls zig locally\n./node_modules/.bin/zig-uninstall # removes the local zig binary/symlink\n```\n\nThe scripts can be manually executed if needed to fix any issue with the installation, either via `npx` (or `pnpx` or `yarn`), `npm exec`, or just referring to the script by name in your package.json `scripts`:\n\n```sh\n# examples for zig-install\n./node_modules/.bin/zig-install\nnpx zig-install\nnpm exec zig-install\n```\n\n```json\n{\n \"scripts\": {\n \"postinstall\": \"zig-install\"\n }\n}\n```\n\n## Notes and TODOs\n\nPriority:\n\n- Handle versions, ideally it should be possible to track upstream Zig releases as tags, `latest` for stable releases, `next` to track master builds for example.\n- Better cross-platform support, only tested on Debian on WSL2 so far, will test on native Arch Linux and macOS later. Should work well on most UNIX-like environments with `curl`, `tar`, and `xz`. Also tested deployment using Cloudflare Pages, Netlify, and Vercel (needed to manually `yum install xz` in the install command).\n\nExplore:\n\n- Provide a JS API for common zig CLI functionality (`build`, `build-lib`, `fmt`, `run`, `test`, `translate-c`, etc.)\n- Compile Zig's `std.zig` functions into Wasm (export C-compatible functions), provide a JS API for the raw compiler functionality (tokenizer, parser)\n\n## Inspiration\n\n- [binary-install](https://github.com/EverlastingBugstopper/binary-install)\n- [wasm-pack npm module](https://github.com/rustwasm/wasm-pack/tree/master/npm)\n\n## License\n\n[MIT](LICENSE)\n"
}
}

@@ -46,3 +46,3 @@ # @ziglang/cli

- Handle versions, ideally it should be possible to track upstream Zig releases as tags, `latest` for stable releases, `next` to track master builds for example.
- Better cross-platform support, only tested on Debian on WSL2 so far, will test on native Arch Linux and macOS later. Should work well on most UNIX-like environments with `curl`, `tar`, and `xz`. Also tested deployment using Cloudflare Pages, Netlify, and Vercel (needed to manually `yum install xz` in the install command).
- Add native Windows support, it works on WSL2, Linux, and macOS. Should work well on most UNIX-like environments with `curl`, `tar`, and `xz`. Also tested deployment using Cloudflare Pages, Netlify, and Vercel (needed to manually `yum install xz` in the install command).

@@ -49,0 +49,0 @@ Explore: