app-builder-bin - npm Package Compare versions

Comparing version 5.0.0-alpha.0 to 5.0.0-alpha.1

index.js

@@ -10,4 +10,7 @@ "use strict"
 
-  const platform = process.platform;
-  const arch = process.arch
+  if (!!process.env.CUSTOM_APP_BUILDER_PATH) {
+    return path.resolve(process.env.CUSTOM_APP_BUILDER_PATH)
+  }
+
+  const { platform, arch } = process;
   if (platform === "darwin") {
@@ -14,0 +17,0 @@ return path.join(__dirname, "mac", `app-builder_${arch === "x64" ? "amd64" : arch}`)

package.json

 {
   "name": "app-builder-bin",
   "description": "app-builder precompiled binaries",
-  "version": "5.0.0-alpha.0",
+  "version": "5.0.0-alpha.1",
   "files": [
@@ -26,3 +26,17 @@ "index.js",
     "tag": "next",
-    "git-checks": false
+    "git-checks": false,
+    "executableFiles": [
+      "linux/arm/app-builder",
+      "linux/arm64/app-builder",
+      "linux/ia32/app-builder",
+      "linux/loong64/app-builder",
+      "linux/riscv64/app-builder",
+      "linux/x64/app-builder",
+      "mac/app-builder",
+      "mac/app-builder_amd64",
+      "mac/app-builder_arm64",
+      "win/arm64/app-builder.exe",
+      "win/ia32/app-builder.exe",
+      "win/x64/app-builder.exe"
+    ]
   },
@@ -29,0 +43,0 @@ "scripts": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

New author

Supply chain risk

A new npm collaborator published a version of the package for the first time. New collaborators are usually benign additions to a project, but do indicate a change to the security surface area of a package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

216691408

increased by0.04%

Lines of code

21

increased by10.53%

Worsened metrics

Number of low supply chain risk alerts

4

increased by100%

Number of medium supply chain risk alerts

9

increased by50%

No dependency changes