node-gyp-build - npm Package Compare versions

Comparing version 3.5.1 to 3.6.0

bin.js

@@ -5,2 +5,3 @@ #!/usr/bin/env node
 var os = require('os')
+var path = require('path')
 
@@ -12,3 +13,13 @@ proc.exec('node-gyp-build-test', function (err) {
 function build () {
-  proc.spawn(os.platform() === 'win32' ? 'node-gyp.cmd' : 'node-gyp', ['rebuild'], {stdio: 'inherit'}).on('exit', function (code) {
+  var args = [ os.platform() === 'win32' ? 'node-gyp.cmd' : 'node-gyp', 'rebuild' ]
+  
+  try {
+    args = [
+      process.execPath,
+      path.join(require.resolve('node-gyp/package.json'), '..', require('node-gyp/package.json').bin['node-gyp']),
+      'rebuild'
+    ]
+  } catch (_) {}
+  
+  proc.spawn(args[0], args.slice(1), {stdio: 'inherit'}).on('exit', function (code) {
     if (code || !process.argv[3]) process.exit(code)
@@ -15,0 +26,0 @@ exec(process.argv[3]).on('exit', function (code) {

package.json

 {
   "name": "node-gyp-build",
-  "version": "3.5.1",
+  "version": "3.6.0",
   "description": "Build tool and bindings loader for node-gyp that supports prebuilds",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

7081

increased by3.96%

Lines of code

119

increased by8.18%

Number of low supply chain risk alerts

10

decreased by-9.09%

No dependency changes