is-mingw - npm Package Compare versions

Comparing version 1.0.0 to 1.0.1

index.js

 'use strict';
-const fs = require('fs');
+const { execSync } = require('child_process');
 
@@ -10,3 +10,6 @@ const isMinGW = () => {
   try {
-    return fs.readFileSync('/proc/version', 'utf8').toLowerCase.includes('mingw');
+    // Reference:
+    // http://man7.org/linux/man-pages/man1/uname.1.html
+    // https://en.wikipedia.org/wiki/Uname
+    return execSync('uname', {encoding: 'utf-8'}).toLowerCase().includes('mingw');
   } catch (err) {
@@ -13,0 +16,0 @@ return false;

package.json

 {
   "name": "is-mingw",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Check if the process is running inside MinGW",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2285

increased by6.48%

Lines of code

16

increased by23.08%

Number of low supply chain risk alerts

1

decreased by-50%

Worsened metrics

Number of medium supply chain risk alerts

1

increased byInfinity%

No dependency changes