hugo-extended - npm Package Compare versions

Comparing version 0.88.0 to 0.88.1-patch1

index.js

 import path from "path";
 import { fileURLToPath } from "url";
+import { getBinFilename } from "./lib/utils.js";
 
@@ -10,5 +11,6 @@ // https://gist.github.com/sindresorhus/a39789f98801d908bbc7ff3ecc99d99c#what-do-i-use-instead-of-__dirname-and-__filename
   "vendor",
-  process.platform === "win32" ? "hugo.exe" : "hugo",
+  getBinFilename(),
 );
 
+// The only thing this module really exports is the absolute path to Hugo:
 export default hugo;

package.json

 {
   "name": "hugo-extended",
-  "version": "0.88.0",
+  "version": "0.88.1-patch1",
+  "hugoVersion": "0.88.1",
   "description": "✏️ Plug-and-play binary wrapper for Hugo Extended, the awesomest static-site generator.",
   "license": "MIT",
+  "homepage": "https://github.com/jakejarvis/hugo-extended",
   "author": {
@@ -17,27 +19,24 @@ "name": "Jake Jarvis",
     "index.js",
-    "cli.js",
-    "install.js"
+    "index.d.ts",
+    "lib"
   ],
   "bin": {
-    "hugo": "cli.js",
-    "hugo-extended": "cli.js"
+    "hugo": "lib/cli.js",
+    "hugo-extended": "lib/cli.js"
   },
   "type": "module",
   "exports": "./index.js",
+  "types": "./index.d.ts",
   "dependencies": {
-    "chalk": "^4.1.2",
-    "decompress": "^4.2.1",
-    "execa": "^5.1.1",
-    "fs-extra": "^10.0.0",
-    "got": "^11.8.2",
-    "sumchecker": "^3.0.1",
-    "tempy": "^2.0.0"
+    "careful-downloader": "^1.4.0",
+    "log-symbols": "^5.0.0",
+    "read-pkg-up": "^9.0.0"
   },
   "devDependencies": {
     "@jakejarvis/eslint-config": "*",
-    "eslint": "^7.32.0",
-    "mocha": "^9.1.1"
+    "eslint": "^8.0.0",
+    "mocha": "^9.1.2"
   },
   "scripts": {
-    "postinstall": "node install.js",
+    "postinstall": "node lib/install.js",
     "test": "eslint . && mocha"
@@ -74,11 +73,10 @@ },
     "env": {
-      "node": true
+      "node": true,
+      "es6": true
     },
-    "rules": {
-      "compat/compat": "off"
-    },
     "ignorePatterns": [
-      "vendor/**"
+      "vendor/**",
+      "*.d.ts"
     ]
   }
 }

README.md

@@ -17,2 +17,10 @@ # <img src="https://raw.githubusercontent.com/gohugoio/gohugoioTheme/master/static/images/hugo-logo-wide.svg?sanitize=true" alt="Hugo" width="115"> via NPM [![npm](https://img.shields.io/npm/v/hugo-extended?color=blue&logo=npm)](https://www.npmjs.com/package/hugo-extended) [![CI status](https://github.com/jakejarvis/hugo-extended/workflows/Run%20tests/badge.svg)](https://github.com/jakejarvis/hugo-extended/actions)
 
+_Note:_ If you'll be using the SCSS features of Hugo Extended, it's probably smart to install [`postcss`](https://www.npmjs.com/package/postcss), [`postcss-cli`](https://www.npmjs.com/package/postcss-cli), and [`autoprefixer`](https://www.npmjs.com/package/autoprefixer) as devDependencies too, since they can be conveniently called via [built-in Hugo pipes](https://gohugo.io/hugo-pipes/postcss/):
+
+```sh
+npm install postcss postcss-cli autoprefixer --save-dev
+# or...
+yarn add postcss postcss-cli autoprefixer --dev
+```
+
 ## Usage
@@ -24,7 +32,7 @@
 
-If you'll be using the SCSS features of Hugo Extended, it's probably smart to install [`postcss`](https://www.npmjs.com/package/postcss), [`postcss-cli`](https://www.npmjs.com/package/postcss-cli), and [`autoprefixer`](https://www.npmjs.com/package/autoprefixer) as devDependencies too, since they can be called via [built-in Hugo pipes](https://gohugo.io/hugo-pipes/postcss/).
+The `build:preview` script below is designed for [Netlify deploy previews](https://www.netlify.com/blog/2016/07/20/introducing-deploy-previews-in-netlify/), where [`$DEPLOY_PRIME_URL`](https://docs.netlify.com/configure-builds/environment-variables/#deploy-urls-and-metadata) is substituted for the base URL (usually ending in .netlify.app) of each pull request, branch, or commit preview.
 
-The `build:preview` script below is designed for [Netlify deploy previews](https://www.netlify.com/blog/2016/07/20/introducing-deploy-previews-in-netlify/), where [`$DEPLOY_PRIME_URL`](https://docs.netlify.com/configure-builds/environment-variables/#deploy-urls-and-metadata) is substituted for the base URL (usually ending in netlify.app) of each commit or pull request.
+```jsonc
+// package.json:
 
-```jsonc
 {
@@ -38,5 +46,5 @@ // ...
   "devDependencies": {
-    "autoprefixer": "^10.2.5",
-    "hugo-extended": "^0.83.1",
-    "postcss": "^8.2.9",
+    "autoprefixer": "^10.3.4",
+    "hugo-extended": "^0.88.1",
+    "postcss": "^8.3.6",
     "postcss-cli": "^8.3.1"
@@ -51,3 +59,4 @@ }
 
-Building sites …
+Start building sites …
+hugo v0.88.1-5BC54738+extended darwin/amd64 BuildDate=2021-09-04T09:39:19Z VendorInfo=gohugoio
 
@@ -66,2 +75,5 @@ | EN
 Built in 2361 ms
+Watching for changes in {archetypes,assets,content,data,layouts,package.json,static}
+Watching for config changes in config.toml
+Environment: "development"
 Serving pages from memory
@@ -74,2 +86,4 @@ Web Server is available at http://localhost:1313/ (bind address 127.0.0.1)
 ```js
+// version.js:
+
 import hugo from "hugo-extended";
@@ -83,2 +97,7 @@ import { execFile } from "child_process";
 
+```bash
+$ node version.js
+hugo v0.88.1-5BC54738+extended darwin/amd64 BuildDate=2021-09-04T09:39:19Z VendorInfo=gohugoio
+```
+
 ## Examples
@@ -90,4 +109,2 @@
 
-Forked from [fenneclab/hugo-bin](https://github.com/fenneclab/hugo-bin) under the [MIT License](https://github.com/fenneclab/hugo-bin/blob/master/LICENSE), (c) [Shun Sato](http://blog.fenneclab.com/).
-
-Hugo is distributed under the [Apache License 2.0](https://github.com/gohugoio/hugo/blob/master/LICENSE).
+This project is distributed under the [MIT License](LICENSE.md). Hugo is distributed under the [Apache License 2.0](https://github.com/gohugoio/hugo/blob/master/LICENSE).

New alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

12969

increased by10.99%

Dependency count

3

decreased by-57.14%

Number of package files

8

increased by33.33%

Lines of code

167

increased by16.78%

Number of low quality alerts

1

decreased by-50%

Number of lines in readme file

103

increased by19.77%

Worsened metrics

Number of medium supply chain risk alerts

3

increased byInfinity%

Dependency changes

• + Addedcareful-downloader@^1.4.0

• + Addedlog-symbols@^5.0.0

• + Addedread-pkg-up@^9.0.0

• + Added@babel/code-frame@7.26.2(transitive)

• + Added@babel/helper-validator-identifier@7.25.9(transitive)

• + Added@types/normalize-package-data@2.4.4(transitive)

• + Addedcareful-downloader@1.4.0(transitive)

• + Addedchalk@5.4.1(transitive)

• + Addederror-ex@1.3.2(transitive)

• + Addedfind-up@6.3.0(transitive)

• + Addedfunction-bind@1.1.2(transitive)

• + Addedhasown@2.0.2(transitive)

• + Addedhosted-git-info@4.1.0(transitive)

• + Addedis-arrayish@0.2.1(transitive)

• + Addedis-core-module@2.16.1(transitive)

• + Addedis-path-in-cwd@4.0.0(transitive)

• + Addedis-path-inside@4.0.0(transitive)

• + Addedis-unicode-supported@1.3.0(transitive)

• + Addedjs-tokens@4.0.0(transitive)

• + Addedjson-parse-even-better-errors@2.3.1(transitive)

• + Addedlines-and-columns@1.2.4(transitive)

• + Addedlocate-path@7.2.0(transitive)

• + Addedlog-symbols@5.1.0(transitive)

• + Addedlru-cache@6.0.0(transitive)

• + Addednormalize-package-data@3.0.3(transitive)

• + Addedp-limit@4.0.0(transitive)

• + Addedp-locate@6.0.0(transitive)

• + Addedparse-json@5.2.0(transitive)

• + Addedpath-exists@5.0.0(transitive)

• + Addedpicocolors@1.1.1(transitive)

• + Addedquerystringify@2.2.0(transitive)

• + Addedread-pkg@7.1.0(transitive)

• + Addedread-pkg-up@9.1.0(transitive)

• + Addedrequires-port@1.0.0(transitive)

• + Addedsemver@7.7.0(transitive)

• + Addedspdx-correct@3.2.0(transitive)

• + Addedspdx-exceptions@2.5.0(transitive)

• + Addedspdx-expression-parse@3.0.1(transitive)

• + Addedspdx-license-ids@3.0.21(transitive)

• + Addedurl-parse@1.5.10(transitive)

• + Addedvalidate-npm-package-license@3.0.4(transitive)

• + Addedyallist@4.0.0(transitive)

• + Addedyocto-queue@1.1.1(transitive)

• - Removedchalk@^4.1.2

• - Removeddecompress@^4.2.1

• - Removedexeca@^5.1.1

• - Removedfs-extra@^10.0.0

• - Removedgot@^11.8.2

• - Removedsumchecker@^3.0.1

• - Removedtempy@^2.0.0

• - Removedansi-styles@4.3.0(transitive)

• - Removedchalk@4.1.2(transitive)

• - Removedcolor-convert@2.0.1(transitive)

• - Removedcolor-name@1.1.4(transitive)

• - Removedcross-spawn@7.0.6(transitive)

• - Removedexeca@5.1.1(transitive)

• - Removedget-stream@6.0.1(transitive)

• - Removedhas-flag@4.0.0(transitive)

• - Removedhuman-signals@2.1.0(transitive)

• - Removedis-stream@2.0.1(transitive)

• - Removedisexe@2.0.0(transitive)

• - Removedmerge-stream@2.0.0(transitive)

• - Removedmimic-fn@2.1.0(transitive)

• - Removednpm-run-path@4.0.1(transitive)

• - Removedonetime@5.1.2(transitive)

• - Removedpath-key@3.1.1(transitive)

• - Removedshebang-command@2.0.0(transitive)

• - Removedshebang-regex@3.0.0(transitive)

• - Removedsignal-exit@3.0.7(transitive)

• - Removedstrip-final-newline@2.0.0(transitive)

• - Removedsupports-color@7.2.0(transitive)

• - Removedwhich@2.0.2(transitive)