eslint-precommit - npm Package Compare versions

Comparing version 1.0.0 to 1.1.0

bin/install.js

+#!/usr/bin/env node
+var fs = require('fs');
+var cwd = process.cwd();
+var path = require('path');
+var os = require('os');
+
+fs.stat(path.join(cwd, '.git'), function(err) {
+  if (err) {
+    return process.exit(0);
+  }
+  if (os.platform === 'win32') {
+    fs.writeFileSync(path.join(cwd, '.git', 'hooks', 'pre-commit.cmd'),
+      fs.readFileSync(path.join(__dirname, 'scripts', 'win.cmd')));
+  } else {
+    var filePath = path.join(cwd, '.git', 'hooks', 'pre-commit');
+    fs.writeFileSync(filePath,
+      fs.readFileSync(path.join(__dirname, 'scripts', 'posix.sh')));
+    fs.chmodSync(filePath, '0755');
+  }
+});

package.json

 {
   "name": "eslint-precommit",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "description": "eslint pre commit",
   "main": "index.js",
+  "bin": {
+    "eslint-precommit": "bin/install.js"
+  },
   "scripts": {
-    "preinstall": "node index.js",
+    "postinstall": "node_modules/.bin/eslint-precommit",
     "test": "echo \"Error: no test specified\" && exit 1"
@@ -9,0 +12,0 @@ },

index.js

-/**
- * Created by fed on 16/8/8.
- */
-var fs = require('fs');
-var cwd = process.cwd();
-var path = require('path');
-var os = require('os');
-
-fs.stat(path.join(cwd, '.git'), function(err) {
-  if (err) {
-    return process.exit(0);
-  }
-  if (os.platform === 'win32') {
-    fs.writeFileSync(path.join(cwd, '.git', 'hooks', 'pre-commit.cmd'),
-      fs.readFileSync(path.join(__dirname, 'scripts', 'win.cmd')));
-  } else {
-    var filePath = path.join(cwd, '.git', 'hooks', 'pre-commit');
-    fs.writeFileSync(filePath,
-      fs.readFileSync(path.join(__dirname, 'scripts', 'posix.sh')));
-    fs.chmodSync(filePath, '0755');
-  }
-});

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed or built. Malicious packages often use scripts that run automatically to execute payloads or fetch additional code.

Fixed alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Install scripts

Supply chain risk

Install scripts are run when the package is installed or built. Malicious packages often use scripts that run automatically to execute payloads or fetch additional code.

Improved metrics

Total package byte prevSize

36466

0.17%

Number of high supply chain risk alerts

1

-50%

Worsened metrics

Lines of code

19

-9.52%

No dependency changes