kasfy - npm Package Compare versions

Comparing version 1.0.5 to 1.0.6

cli.js

 #!/usr/bin/env node
 
 const shell = require('shelljs')
+const fs = require('fs');
 
@@ -15,7 +16,24 @@ if (!shell.which('git')) {
 program
-  .version('1.0.5')
+  .version('1.0.6')
   .action(() => {
-    console.log("\n \n 🔥 Welcome to the Kasfy CLI  🔥 Version : 1.0.5 🔥\n \n");
+    console.log("\n \n 🔥 Welcome to the Kasfy CLI  🔥 Version : 1.0.6 🔥\n \n");
   });
 
+program
+  .command('serve')
+  .alias('dev')
+  .description('✅ Serve the application')
+  .action(() => {
+
+	if (!fs.existsSync('./node_modules'))
+	  throw new Error(
+	    'Error: node_modules directory missing'
+	  );
+
+    const npm = require("npm");
+    npm.load();
+    npm.load(() => npm.run("start"));
+  });
+  
+
 if (process.platform == 'linux') {
@@ -22,0 +40,0 @@ program

package.json

 {
  "name": "kasfy",
- "version": "1.0.5",
+ "version": "1.0.6",
  "description": "node js framework for smart back-end",
@@ -16,2 +16,3 @@ "main": "cli.js",
   "commander": "^6.0.0",
+  "fs": "0.0.1-security",
   "shelljs": "^0.8.4"
@@ -32,3 +33,6 @@ },
   "url": "https://github.com/kasfy/kasfy/issues"
+ },
+ "devDependencies": {
+  "npm": "^6.14.8"
  }
 }

New alerts

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

5152

increased by8.67%

Lines of code

113

increased by14.14%

Worsened metrics

Dependency count

3

increased by50%

Dev dependency count

1

increased byInfinity%

Number of low supply chain risk alerts

1

increased byInfinity%

Dependency changes

• + Addedfs@0.0.1-security

• + Addedfs@0.0.1-security(transitive)