egg-bin - npm Package Compare versions

Comparing version 1.2.0 to 1.2.1

History.md

 
+1.2.1 / 2016-08-18
+==================
+
+  * fix: can not find iron-node in subprocess (#8)
+
 1.2.0 / 2016-08-04
@@ -3,0 +8,0 @@ ==================

lib/debug_command.js

 'use strict';
 
+const path = require('path');
 const debug = require('debug')('egg-bin:debug');
@@ -42,2 +43,3 @@ const childprocess = require('childprocess');
       const originSetupMaster = cluster.setupMaster;
+      /* istanbul ignore next */
       cluster.setupMaster = function(settings) {
@@ -48,3 +50,3 @@ if (!settings) return;
         settings.args = args;
-        settings.exec = require.resolve('iron-node/bin/run.js');
+        settings.exec = process.env.IRON_NODE_PATH;
         originSetupMaster.call(cluster, settings);
@@ -55,2 +57,5 @@ };
 
+    // iron-node should be installed in cwd,
+    // resolve after iron-node installed
+    options.env.IRON_NODE_PATH = require.resolve(path.join(process.cwd(), 'node_modules/iron-node/bin/run.js'));
     this.helper.forkNode(this.helper.serverBin, args, options);
@@ -57,0 +62,0 @@ }

package.json

 {
   "name": "egg-bin",
-  "version": "1.2.0",
+  "version": "1.2.1",
   "description": "egg developer tool",
@@ -10,3 +10,3 @@ "main": "index.js",
   "dependencies": {
-    "childprocess": "^2.0.0",
+    "childprocess": "^2.0.2",
     "commander": "^2.9.0",
@@ -24,4 +24,4 @@ "common-bin": "^1.0.0",
   "devDependencies": {
-    "autod": "2",
-    "coffee": "3",
+    "autod": "^2.7.0",
+    "coffee": "^3.2.4",
     "egg-ci": "1",
@@ -31,3 +31,3 @@ "eslint": "3",
     "intelli-espower-loader": "^1.0.1",
-    "mm": "1",
+    "mm": "^2.0.0",
     "power-assert": "^1.4.1"
@@ -46,3 +46,3 @@ },
     "ci": "npm run lint && npm run cov",
-    "autod": "autod -e test/fixtures -f '^' -w"
+    "autod": "autod"
   },
@@ -49,0 +49,0 @@ "engines": {

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

15305

increased by2.19%

Lines of code

248

increased by2.06%

Worsened metrics

Number of low supply chain risk alerts

17

increased by13.33%

Dependency changes

• Updatedchildprocess@^2.0.2