gulp-cli - npm Package Compare versions

Comparing version 2.2.1 to 2.3.0

index.js

@@ -65,3 +65,8 @@ 'use strict';
 cli.on('require', function(name) {
-  log.info('Requiring external module', ansi.magenta(name));
+  // This is needed because interpret needs to stub the .mjs extension
+  // Without the .mjs require hook, rechoir blows up
+  // However, we don't want to show the mjs-stub loader in the logs
+  if (path.basename(name, '.js') !== 'mjs-stub') {
+    log.info('Requiring external module', ansi.magenta(name));
+  }
 });
@@ -68,0 +73,0 @@

lib/versioned/^3.7.0/index.js

@@ -14,5 +14,7 @@ 'use strict';
 var ansi = require('../../shared/ansi');
+var exit = require('../../shared/exit');
 var logEvents = require('./log/events');
 var logTasksSimple = require('./log/tasks-simple');
 var registerExports = require('../../shared/register-exports');
+var requireOrImport = require('../../shared/require-or-import');
 
@@ -29,16 +31,21 @@ function execute(opts, env, config) {
   // This is what actually loads up the gulpfile
-  var exported = require(env.configPath);
-  log.info('Using gulpfile', ansi.magenta(tildify(env.configPath)));
+  requireOrImport(env.configPath, function(err, exported) {
+    // Before import(), if require() failed we got an unhandled exception on the module level.
+    // So console.error() & exit() were added here to mimic the old behavior as close as possible.
+    if (err) {
+      console.error(err);
+      exit(1);
+    }
 
-  var gulpInst = require(env.modulePath);
-  logEvents(gulpInst);
+    log.info('Using gulpfile', ansi.magenta(tildify(env.configPath)));
 
-  registerExports(gulpInst, exported);
+    var gulpInst = require(env.modulePath);
+    logEvents(gulpInst);
 
-  // Always unmute stdout after gulpfile is required
-  stdout.unmute();
+    registerExports(gulpInst, exported);
 
-  process.nextTick(function() {
+    // Always unmute stdout after gulpfile is required
+    stdout.unmute();
+
     var tree;
-
     if (opts.tasksSimple) {
@@ -45,0 +52,0 @@ return logTasksSimple(env, gulpInst);

lib/versioned/^4.0.0-alpha.1/index.js

@@ -19,2 +19,3 @@ 'use strict';
 var copyTree = require('../../shared/log/copy-tree');
+var requireOrImport = require('../../shared/require-or-import');
 
@@ -36,12 +37,16 @@ function execute(opts, env, config) {
   // This is what actually loads up the gulpfile
-  var exported = require(env.configPath);
+  requireOrImport(env.configPath, function(err, exported) {
+    // Before import(), if require() failed we got an unhandled exception on the module level.
+    // So console.error() & exit() were added here to mimic the old behavior as close as possible.
+    if (err) {
+      console.error(err);
+      exit(1);
+    }
 
-  registerExports(gulpInst, exported);
+    registerExports(gulpInst, exported);
 
-  // Always unmute stdout after gulpfile is required
-  stdout.unmute();
+    // Always unmute stdout after gulpfile is required
+    stdout.unmute();
 
-  process.nextTick(function() {
     var tree;
-
     if (opts.tasksSimple) {
@@ -48,0 +53,0 @@ return logTasksSimple(gulpInst.tree());

lib/versioned/^4.0.0-alpha.2/index.js

@@ -20,2 +20,3 @@ 'use strict';
 var getTask = require('../^4.0.0/log/get-task');
+var requireOrImport = require('../../shared/require-or-import');
 
@@ -37,12 +38,16 @@ function execute(opts, env, config) {
   // This is what actually loads up the gulpfile
-  var exported = require(env.configPath);
+  requireOrImport(env.configPath, function(err, exported) {
+    // Before import(), if require() failed we got an unhandled exception on the module level.
+    // So console.error() & exit() were added here to mimic the old behavior as close as possible.
+    if (err) {
+      console.error(err);
+      exit(1);
+    }
 
-  registerExports(gulpInst, exported);
+    registerExports(gulpInst, exported);
 
-  // Always unmute stdout after gulpfile is required
-  stdout.unmute();
+    // Always unmute stdout after gulpfile is required
+    stdout.unmute();
 
-  process.nextTick(function() {
     var tree;
-
     if (opts.tasksSimple) {
@@ -49,0 +54,0 @@ tree = gulpInst.tree();

lib/versioned/^4.0.0/index.js

@@ -20,2 +20,3 @@ 'use strict';
 var getTask = require('./log/get-task');
+var requireOrImport = require('../../shared/require-or-import');
 
@@ -37,12 +38,16 @@ function execute(opts, env, config) {
   // This is what actually loads up the gulpfile
-  var exported = require(env.configPath);
+  requireOrImport(env.configPath, function(err, exported) {
+    // Before import(), if require() failed we got an unhandled exception on the module level.
+    // So console.error() & exit() were added here to mimic the old behavior as close as possible.
+    if (err) {
+      console.error(err);
+      exit(1);
+    }
 
-  registerExports(gulpInst, exported);
+    registerExports(gulpInst, exported);
 
-  // Always unmute stdout after gulpfile is required
-  stdout.unmute();
+    // Always unmute stdout after gulpfile is required
+    stdout.unmute();
 
-  process.nextTick(function() {
     var tree;
-
     if (opts.tasksSimple) {
@@ -49,0 +54,0 @@ tree = gulpInst.tree();

package.json

 {
   "name": "gulp-cli",
-  "version": "2.2.1",
+  "version": "2.3.0",
   "description": "Command line interface for gulp",
@@ -42,3 +42,3 @@ "author": "Gulp Team <[e-mail]> (https://gulpjs.com/)",
     "gulplog": "^1.0.0",
-    "interpret": "^1.1.0",
+    "interpret": "^1.4.0",
     "isobject": "^3.0.1",
@@ -51,3 +51,3 @@ "liftoff": "^3.1.0",
     "semver-greatest-satisfied-range": "^1.1.0",
-    "v8flags": "^3.0.1",
+    "v8flags": "^3.2.0",
     "yargs": "^7.1.0"
@@ -67,3 +67,4 @@ },
     "nyc": "^13.3.0",
-    "rimraf": "^2.6.1"
+    "rimraf": "^2.6.1",
+    "semver": "^5.7.1"
   },
@@ -70,0 +71,0 @@ "keywords": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

60907

increased by4.37%

Number of package files

42

increased by2.44%

Lines of code

1403

increased by4.31%

Number of low supply chain risk alerts

19

decreased by-13.64%

Worsened metrics

Dev dependency count

13

increased by8.33%

Number of medium supply chain risk alerts

2

increased by100%

Dependency changes

• Updatedinterpret@^1.4.0

• Updatedv8flags@^3.2.0