create-fuse-app - npm Package Compare versions

Comparing version 0.1.1 to 0.2.0

dist/index.js

@@ -7,3 +7,2 @@ #!/usr/bin/env node
 import * as prompts from "@clack/prompts";
-import { install } from "pkg-install";
 import babel from "@babel/core";
@@ -75,6 +74,63 @@ import * as kl from "kolorist";
 
+// src/get-package-manager.ts
+function getPkgManager() {
+  const userAgent = process.env.npm_config_user_agent || "";
+  if (userAgent.startsWith("yarn")) {
+    return "yarn";
+  }
+  if (userAgent.startsWith("pnpm")) {
+    return "pnpm";
+  }
+  if (userAgent.startsWith("bun")) {
+    return "bun";
+  }
+  return "npm";
+}
+
+// src/install-package.ts
+import { execa } from "execa";
+async function install(packageManager, env, packages) {
+  let args = [];
+  switch (packageManager) {
+    case "npm": {
+      args.push("install");
+      if (env === "dev") {
+        args.push("--save-dev");
+      } else {
+        args.push("--save");
+      }
+    }
+    case "yarn": {
+      args.push("add");
+      if (env === "dev") {
+        args.push("-D");
+      }
+    }
+    case "pnpm": {
+      args.push("add");
+      if (env === "dev") {
+        args.push("-D");
+      }
+    }
+    case "bun": {
+      args.push("add");
+      if (env === "dev") {
+        args.push("-D");
+      }
+    }
+  }
+  args.push(...packages);
+  await execa(packageManager, args, {
+    stdio: "inherit",
+    env: {
+      ...process.env,
+      NODE_ENV: "development"
+    }
+  });
+}
+
 // src/index.ts
 var s = prompts.spinner();
 async function createFuseApp() {
-  const packageManager = /yarn/.test(process.env.npm_execpath || "") ? "yarn" : "npm";
+  const packageManager = getPkgManager();
   prompts.intro(kl.trueColor(219, 254, 1)("Fuse - Your new datalayer"));
@@ -97,12 +153,7 @@ const targetDir = resolve(process.cwd());
   s.start("Installing fuse...");
-  await install(["fuse"], {
-    prefer: packageManager,
-    cwd: targetDir,
-    dev: false
-  });
-  await install(["@0no-co/graphqlsp", "@graphql-typed-document-node/core"], {
-    prefer: packageManager,
-    cwd: targetDir,
-    dev: true
-  });
+  await install(packageManager, "prod", ["fuse"]);
+  await install(packageManager, "dev", [
+    "@0no-co/graphqlsp",
+    "@graphql-typed-document-node/core"
+  ]);
   s.stop(kl.green("Installed fuse!"));
@@ -109,0 +160,0 @@ s.start("Creating API Route...");

package.json

 {
   "name": "create-fuse-app",
-  "version": "0.1.1",
+  "version": "0.2.0",
   "description": "The magical GraphQL framework",
@@ -25,4 +25,4 @@ "homepage": "https://github.com/StellateHQ/fuse.js",
     "@clack/prompts": "^0.7.0",
-    "kolorist": "^1.8.0",
-    "pkg-install": "^1.0.0"
+    "execa": "^8.0.1",
+    "kolorist": "^1.8.0"
   },
@@ -29,0 +29,0 @@ "devDependencies": {

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 2 instances in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

13931

7.43%

Lines of code

358

15.86%

Worsened metrics

Number of low supply chain risk alerts

2

100%

Dependency changes

• + Added

  execa@^8.0.1

• + Added

  cross-spawn@7.0.6
  (transitive)

• + Added

  execa@8.0.1
  (transitive)

• + Added

  get-stream@8.0.1
  (transitive)

• + Added

  human-signals@5.0.0
  (transitive)

• + Added

  is-stream@3.0.0
  (transitive)

• + Added

  merge-stream@2.0.0
  (transitive)

• + Added

  mimic-fn@4.0.0
  (transitive)

• + Added

  npm-run-path@5.3.0
  (transitive)

• + Added

  onetime@6.0.0
  (transitive)

• + Added

  path-key@3.1.14.0.0
  (transitive)

• + Added

  shebang-command@2.0.0
  (transitive)

• + Added

  shebang-regex@3.0.0
  (transitive)

• + Added

  signal-exit@4.1.0
  (transitive)

• + Added

  strip-final-newline@3.0.0
  (transitive)

• + Added

  which@2.0.2
  (transitive)

• - Removed

  pkg-install@^1.0.0

• - Removed

  @types/execa@0.9.0
  (transitive)

• - Removed

  @types/node@11.15.54
  (transitive)

• - Removed

  cross-spawn@6.0.6
  (transitive)

• - Removed

  end-of-stream@1.4.5
  (transitive)

• - Removed

  execa@1.0.0
  (transitive)

• - Removed

  get-stream@4.1.0
  (transitive)

• - Removed

  is-stream@1.1.0
  (transitive)

• - Removed

  nice-try@1.0.5
  (transitive)

• - Removed

  npm-run-path@2.0.2
  (transitive)

• - Removed

  once@1.4.0
  (transitive)

• - Removed

  p-finally@1.0.0
  (transitive)

• - Removed

  path-key@2.0.1
  (transitive)

• - Removed

  pkg-install@1.0.0
  (transitive)

• - Removed

  pump@3.0.3
  (transitive)

• - Removed

  semver@5.7.2
  (transitive)

• - Removed

  shebang-command@1.2.0
  (transitive)

• - Removed

  shebang-regex@1.0.0
  (transitive)

• - Removed

  signal-exit@3.0.7
  (transitive)

• - Removed

  strip-eof@1.0.0
  (transitive)

• - Removed

  which@1.3.1
  (transitive)

• - Removed

  wrappy@1.0.2
  (transitive)