napi-postinstall - npm Package Compare versions

Comparing version 0.1.0 to 0.1.1

lib/helpers.d.ts

@@ -5,8 +5,8 @@ import { NapiInfo, PackageJson } from './types.js';
 export declare function downloadedNodePath(name: string, subpath: string): string;
-export declare function getNapiInfoFromPackageJson(packageJson: PackageJson, checkVersion: true): NapiInfo;
-export declare function getNapiInfoFromPackageJson(packageJson: PackageJson, checkVersion?: boolean): NapiInfo & {
-    version?: string;
+export declare function getNapiInfoFromPackageJson(packageJson: PackageJson, checkVersion: true): NapiInfo & {
+    version: string;
 };
+export declare function getNapiInfoFromPackageJson(packageJson: PackageJson, checkVersion?: boolean): NapiInfo;
 export declare function getNapiNativeTarget(): string[] | string;
 export declare function getNapiNativeTargets(): string[];
 export declare function getErrorMessage(err: unknown): string;

lib/helpers.js

@@ -54,12 +54,15 @@ "use strict";
     const targets = (_a = napi_ === null || napi_ === void 0 ? void 0 : napi_.targets) !== null && _a !== void 0 ? _a : (_b = napi_ === null || napi_ === void 0 ? void 0 : napi_.triples) === null || _b === void 0 ? void 0 : _b.additional;
-    if (!(targets === null || targets === void 0 ? void 0 : targets.length) || !optionalDependencies) {
-        throw new Error(`No \`napi.targets\` nor \`optionalDependencies\` field found in \`${name}\`'s \`package.json\`. Please ensure the package is built with NAPI support.`);
+    if (!(targets === null || targets === void 0 ? void 0 : targets.length)) {
+        throw new Error(`No \`napi.targets\` nor \`napi.triples.additional\` field found in \`${name}\`'s \`package.json\`. Please ensure the package is built with NAPI support.`);
     }
     const napi = napi_;
+    (_c = napi.binaryName) !== null && _c !== void 0 ? _c : (napi.binaryName = napi.name);
+    (_d = napi.packageName) !== null && _d !== void 0 ? _d : (napi.packageName = (_f = (_e = napi.package) === null || _e === void 0 ? void 0 : _e.name) !== null && _f !== void 0 ? _f : name);
     napi.targets = targets;
+    if (!optionalDependencies) {
+        return { napi };
+    }
     let version;
     for (const target of targets) {
         const { platformArchABI } = (0, target_js_1.parseTriple)(target);
-        (_c = napi.binaryName) !== null && _c !== void 0 ? _c : (napi.binaryName = napi.name);
-        (_d = napi.packageName) !== null && _d !== void 0 ? _d : (napi.packageName = (_f = (_e = napi.package) === null || _e === void 0 ? void 0 : _e.name) !== null && _f !== void 0 ? _f : name);
         const pkg = `${napi.packageName}-${platformArchABI}`;
@@ -66,0 +69,0 @@ const packageVersion = optionalDependencies[pkg];

lib/index.js

@@ -107,4 +107,4 @@ "use strict";
             : packageNameOrPackageJson;
-        const { napi, version: napiVersion } = (0, helpers_js_1.getNapiInfoFromPackageJson)(packageJson, checkVersion);
         const { name, version, optionalDependencies } = packageJson;
+        const { napi, version: napiVersion = version } = (0, helpers_js_1.getNapiInfoFromPackageJson)(packageJson, checkVersion);
         if (checkVersion && version !== napiVersion) {
@@ -116,3 +116,3 @@ throw new Error(`Inconsistent package versions found for \`${name}\` v${version} vs \`${napi.packageName}\` v${napiVersion}.`);
             const pkg = `${napi.packageName}-${target}`;
-            if (!optionalDependencies[pkg]) {
+            if (!(optionalDependencies === null || optionalDependencies === void 0 ? void 0 : optionalDependencies[pkg])) {
                 continue;
@@ -139,3 +139,3 @@ }
                     console.error(`${constants_js_1.LOG_PREFIX}Trying to install package "${pkg}" using npm`);
-                    installUsingNPM(name, pkg, version, subpath, nodePath);
+                    installUsingNPM(name, pkg, napiVersion, subpath, nodePath);
                     break;
@@ -146,3 +146,3 @@ }
                     try {
-                        yield downloadDirectlyFromNPM(pkg, version, subpath, nodePath);
+                        yield downloadDirectlyFromNPM(pkg, napiVersion, subpath, nodePath);
                         break;
@@ -149,0 +149,0 @@ }

lib/types.d.ts

@@ -21,3 +21,3 @@ export interface Napi {
     napi: Napi;
-    version: string;
+    version?: string;
 }
@@ -24,0 +24,0 @@ export interface PackageJson {

package.json

 {
   "name": "napi-postinstall",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "type": "commonjs",
@@ -5,0 +5,0 @@ "description": "The `postinstall` script helper for handling native bindings in legacy `npm` versions",

New alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

42087

0.56%

Lines of code

505

0.6%

No dependency changes