cli-eb-test - npm Package Compare versions

Comparing version 2.4.0 to 2.5.0

cache.json

@@ -1,1 +0,1 @@
-{"timestamp":1505492575058,"version":"0.0.1"}
+{"timestamp":1505498576941,"version":"0.1.0\n"}

lib/Installer.js

@@ -0,1 +1,2 @@
+const exec = require('child_process').exec
 const fetch = require('node-fetch')
@@ -40,3 +41,3 @@ const fs = require('fs')
 
-Installer.prototype.install = function () {
+Installer.prototype.install = function (newVersion) {
   return fetch(url, {
@@ -71,6 +72,20 @@ compress: false
 
+    // Set +x permissions on the executable
     this.setExecPermissions(this.target)
 
+    // Create the runner file
     this.createRunner()
 
+    if (newVersion) {
+      return newVersion
+    }
+
+    return new Promise((resolve, reject) => {
+      exec(`${this.target} -v`, (error, stdout, stderr) => {
+        if (error) return reject(error)
+
+        resolve(stdout)
+      })
+    })
+  }).then(installedVersion => {
     const updateCheck = new UpdateCheck({
@@ -80,3 +95,3 @@ cachePath: this.cachePath
 
-    updateCheck.writeCache('0.0.1')
+    updateCheck.writeCache(installedVersion)
   })
@@ -83,0 +98,0 @@ }

package.json

 {
   "name": "cli-eb-test",
-  "version": "2.4.0",
+  "version": "2.5.0",
   "description": "A command-line tool for installation and customisation of the DADI platform",
@@ -5,0 +5,0 @@ "bin": {

updater.js

@@ -21,3 +21,3 @@ const path = require('path')
       cachePath,
-      targetDirectory: path.join(__dirname, 'bin')
+      targetDirectory: __dirname
     })
@@ -24,0 +24,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

50190657

increased by974286.66%

Number of package files

9

increased by12.5%

Lines of code

167

increased by8.44%

Worsened metrics

Number of medium supply chain risk alerts

3

increased by200%

No dependency changes