clean-publish - npm Package Compare versions

Comparing version 1.0.1 to 1.0.2

clean-publish.js

 #!/usr/bin/env node
 
-var fs = require('fs');
-var fse = require('fs-extra');
-var CONFIG_FILES_LIST = require('./config-files-list');
+const fs = require('fs');
+const fse = require('fs-extra');
+const omit = require('lodash.omit');
+const {
+  spawn,
+  execSync,
+} = require('child_process');
 
-(function() {
-  var tmp = './tmp';
-  fs.mkdirSync(tmp);
-  fs.readdirSync('./').forEach(function(i) {
-    if (i !== 'tmp') {
-      if (CONFIG_FILES_LIST.indexOf(i) == -1 || fs.statSync(i).isDirectory()) {
-        fse.copy(i, `${tmp}/${i}`);
+const IGNORE_FILES = require('./ignore-files');
+const IGNORE_FIELDS = require('./ignore-fields');
+
+(function () {
+  const tmp = fs.mkdtempSync('tmp');
+  const src = './'
+  const packageJSON = 'package.json'
+  fs.readdirSync(src).forEach(i => {
+    if (i !== tmp) {
+      if (IGNORE_FILES.indexOf(i) == -1 || fs.statSync(i).isDirectory()) {
+        fse.copy(i, `${tmp}/${i}`)
+          .then(() => {
+            if (i === packageJSON) {
+              fse.readJson(packageJSON, (err, obj) => {
+                fse.writeJsonSync(`./${tmp}/${packageJSON}`, omit(obj, IGNORE_FIELDS), {
+                  spaces: 2
+                })
+              })
+            }
+          });
       }
     }
+  })
+  process.chdir(tmp);
+  const publish = spawn('npm', ['publish'], {
+    stdio: 'inherit'
   });
-})();
+  publish.on('exit', () => {
+    fse.removeSync(tmp);
+  })
+  process.chdir('../');
+})();

package.json

 {
   "name": "clean-publish",
-  "version": "1.0.1",
+  "version": "1.0.2",
   "description": "Clean your package before publish",
@@ -24,4 +24,5 @@ "keywords": [
   "dependencies": {
-    "fs-extra": "^6.0.1"
+    "fs-extra": "^6.0.1",
+    "lodash.omit": "^4.5.0"
   }
 }

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

3285

increased by43.51%

Number of package files

7

increased by40%

Lines of code

60

increased by150%

Worsened metrics

Dependency count

2

increased by100%

Number of medium supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedlodash.omit@^4.5.0

• + Addedlodash.omit@4.5.0(transitive)