esy - npm Package Compare versions

Comparing version 0.6.10 to 0.6.11-next

package.json

 {
   "name": "esy",
-  "version": "0.6.10",
+  "version": "0.6.11-next",
   "license": "MIT",
   "description": "Package builder for esy.",
   "scripts": {
-    "postinstall": "node -e \"process.env['OCAML_VERSION'] = process.platform == 'linux' ? '4.10.1002-musl.static.flambda': '4.10.0'; process.env['OCAML_PKG_NAME'] = 'ocaml'; require('./postinstall.js')\""
+    "postinstall": "node -e \"process.env['OCAML_VERSION'] = process.platform == 'linux' ? '4.12.0-musl.static.flambda': '4.12.0'; process.env['OCAML_PKG_NAME'] = 'ocaml'; require('./postinstall.js')\""
   },
@@ -9,0 +9,0 @@ "bin": {

platform-darwin-arm64/package.json

@@ -5,3 +5,3 @@ {
   "name": "esy",
-  "version": "0.6.10",
+  "version": "0.6.11",
   "scripts": {
@@ -8,0 +8,0 @@ "postinstall":

platform-darwin-arm64/README.md

@@ -140,2 +140,6 @@ # esy
 
+#### Slow tests
+By placing `@slowtest` token in commit messages, we mark the commit ready for the slow tests framework
+(tests that hit the network). They are run with `node test-e2e-slow/run-slow-tests.js`
+
 #### Windows
@@ -142,0 +146,0 @@

platform-darwin/package.json

@@ -5,3 +5,3 @@ {
   "name": "esy",
-  "version": "0.6.10",
+  "version": "0.6.11",
   "scripts": {
@@ -8,0 +8,0 @@ "postinstall":

platform-darwin/README.md

@@ -140,2 +140,6 @@ # esy
 
+#### Slow tests
+By placing `@slowtest` token in commit messages, we mark the commit ready for the slow tests framework
+(tests that hit the network). They are run with `node test-e2e-slow/run-slow-tests.js`
+
 #### Windows
@@ -142,0 +146,0 @@

platform-linux/package.json

@@ -5,8 +5,8 @@ {
   "name": "esy",
-  "version": "0.6.10",
+  "version": "0.6.11",
   "scripts": {
     "postinstall":
-      "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='4.10.1002-musl.static.flambda'; require('./esyInstallRelease.js')\""
+      "node -e \"process.env['OCAML_VERSION']='ocaml'; process.env['OCAML_PKG_NAME']='4.12.0'; require('./esyInstallRelease.js')\""
   },
   "bin": { "esy": "bin/esy" }
 }

platform-linux/README.md

@@ -140,2 +140,6 @@ # esy
 
+#### Slow tests
+By placing `@slowtest` token in commit messages, we mark the commit ready for the slow tests framework
+(tests that hit the network). They are run with `node test-e2e-slow/run-slow-tests.js`
+
 #### Windows
@@ -142,0 +146,0 @@

platform-windows-x64/package.json

@@ -5,3 +5,3 @@ {
   "name": "esy",
-  "version": "0.6.10",
+  "version": "0.6.11",
   "scripts": {
@@ -8,0 +8,0 @@ "postinstall":

platform-windows-x64/README.md

@@ -140,2 +140,6 @@ # esy
 
+#### Slow tests
+By placing `@slowtest` token in commit messages, we mark the commit ready for the slow tests framework
+(tests that hit the network). They are run with `node test-e2e-slow/run-slow-tests.js`
+
 #### Windows
@@ -142,0 +146,0 @@

README.md

@@ -140,2 +140,6 @@ # esy
 
+#### Slow tests
+By placing `@slowtest` token in commit messages, we mark the commit ready for the slow tests framework
+(tests that hit the network). They are run with `node test-e2e-slow/run-slow-tests.js`
+
 #### Windows
@@ -142,0 +146,0 @@

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 2 instances in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 2 instances in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Improved metrics

Total package byte prevSize

97029003

increased by0.52%

Number of lines in readme file

279

increased by1.45%

No dependency changes