esc-commit-msg - npm Package Compare versions

Comparing version 0.0.1 to 0.0.2

bin/run.js

+#!/usr/bin/env node
+
+const chalk = require('chalk');
+import * as path from 'path';
+import * as fs from 'fs';
+import * as shell from 'shelljs';
+
+
+
+console.log('这是入口输出——————————————————————————————————————————————')
+// shell.cp('-R', path.join(__dirname, './../commitlint.config.js'), `${process.cwd()}/`);
+
+  const commitMsgPath = `${process.cwd()}/.git/hooks`;
+  try {
+    // 拷贝当前工具中git规范提交脚本到扫描项目中的.git目录下
+    shell.cp('-R', path.join(__dirname, './../test123.js'), `${process.cwd()}/`);
+    // 修改文件权限为可执行
+    // shell.exec(`chmod 777 ${commitMsgPath}/commit-msg`);
+  } catch (e) {
+  }

esc-commit-msg.js

+require('./bin/run.js')
+console.log('入口文件？？？？？？？')

package.json

 {
   "name": "esc-commit-msg",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "git提交规范",
-  "main": "./src/index.js",
-  "bin": "./scripts/index.js",
+  "main": "./esc-commit-msg.js",
+  "bin": "./bin/run.js",
   "scripts": {
@@ -8,0 +8,0 @@ "test": "node ./scripts/index.js",

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

5666

17.09%

Number of package files

10

25%

Lines of code

95

18.75%

Worsened metrics

Number of low supply chain risk alerts

3

50%

No dependency changes