mup - npm Package Compare versions

Comparing version 0.6.8 to 0.6.9

lib/actions.js

@@ -75,7 +75,13 @@ var nodemiral = require('nodemiral');
   var self = this;
-  var bundleLocation = path.resolve('/tmp', uuid.v4()); 
-  var bundlePath = path.resolve(bundleLocation, 'bundle.tar.gz');
+  var buildLocation = path.resolve('/tmp', uuid.v4()); 
+  var bundlePath = path.resolve(buildLocation, 'bundle.tar.gz');
 
-  var command = getBundleCommand(bundleLocation);
-  var options = {cwd: this.config.app};
+  var options = {
+    cwd: this.config.app,
+  };
+  // spawn inherits env vars from process.env
+  // so we can simply set them like this
+  process.env.BUILD_LOCATION = buildLocation;
+
+  var buildScript = path.resolve(__dirname, 'build.sh');
   var deployCheckWaitTime = this.config.deployCheckWaitTime;
@@ -91,3 +97,3 @@ var appName = this.config.appName;
   
-  var bash = spawn("bash", ["-c", command], options);
+  var bash = spawn("bash", [buildScript], options);
   bash.stdout.on('data', storeLastNChars(vars, "stdout", 1000));
@@ -133,12 +139,4 @@ bash.stderr.on('data', storeLastNChars(vars, "stderr", 1000));
   function afterCompleted(summeryMap) {
-    rimraf.sync(bundleLocation);
+    rimraf.sync(buildLocation);
   }
-
-  function getBundleCommand(location) {
-    var command = 
-      "meteor build --directory " + location + " && " +
-      "cd " + location + " && " + 
-      "tar cvzf bundle.tar.gz bundle";
-    return command;
-  }
 };
@@ -145,0 +143,0 @@

package.json

 {
   "name": "mup",
-  "version": "0.6.8",
+  "version": "0.6.9",
   "description": "Production Quality Meteor Deployments",
@@ -5,0 +5,0 @@ "dependencies": {

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

39181

increased by1.44%

Number of package files

26

increased by4%

Worsened metrics

Lines of code

457

decreased by-0.44%

Number of low supply chain risk alerts

8

increased by14.29%

No dependency changes