build-strap - npm Package Compare versions

Comparing version 5.0.4-dev.106 to 5.0.4-dev.115

package.json

 {
   "name": "build-strap",
-  "version": "5.0.4-dev.106",
+  "version": "5.0.4-dev.115",
   "description": "Node scripts for building things",
@@ -5,0 +5,0 @@ "license": "MIT",

src/env.js

@@ -69,3 +69,6 @@ import fs from 'fs-extra';
     try {
-        return (await spawn(shell, ['-c', `${refreshEnv ? `source ${envFile} && ` : ''}printenv ${name}`], {
+        return (await spawn(shell, [
+            '-c',
+            `${refreshEnv ? `source ${envFile} > /dev/null 2>&1  && ` : ''}printenv ${name}`,
+        ], {
             captureOutput: true,
@@ -72,0 +75,0 @@ env: {

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 7 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 7 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

148618

0.04%

Lines of code

3494

0.09%

No dependency changes