impunity - npm Package Compare versions

Comparing version 1.0.6 to 1.0.7

cmd.js

 #!/usr/bin/env node
-require("./run.js");
+const path = require("path");
+const {spawn} = require('child_process');
+
+const otherArgs = process.argv.slice(2);
+spawn("node", [
+	"--experimental-json-modules",
+	"--experimental-loader",
+	require.resolve("./src/resolve-hook.mjs"),
+	require.resolve("./src/main.mjs"),
+	...otherArgs
+], {
+	shell: true,
+	stdio: "inherit"
+});

package.json

 {
   "name": "impunity",
-  "version": "1.0.6",
+  "version": "1.0.7",
   "description": "js test runner that finds unit tests in any imported ES module",
@@ -5,0 +5,0 @@ "main": "src/main.js",

New alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

8954

3.48%

Lines of code

195

5.98%

Worsened metrics

Number of medium supply chain risk alerts

1

Infinity%

No dependency changes