node-gyp-build - npm Package Compare versions

Comparing version 4.8.0 to 4.8.1

bin.js

@@ -19,3 +19,4 @@ #!/usr/bin/env node
 function build () {
-  var args = [os.platform() === 'win32' ? 'node-gyp.cmd' : 'node-gyp', 'rebuild']
+  var win32 = os.platform() === 'win32'
+  var args = [win32 ? 'node-gyp.cmd' : 'node-gyp', 'rebuild']
 
@@ -31,3 +32,3 @@ try {
 
-  proc.spawn(args[0], args.slice(1), { stdio: 'inherit' }).on('exit', function (code) {
+  proc.spawn(args[0], args.slice(1), { stdio: 'inherit', shell: win32, windowsHide: true }).on('exit', function (code) {
     if (code || !process.argv[3]) process.exit(code)
@@ -50,4 +51,5 @@ exec(process.argv[3]).on('exit', function (code) {
   if (process.platform !== 'win32') {
-    var shell = os.platform() === 'android' ? 'sh' : '/bin/sh'
-    return proc.spawn(shell, ['-c', '--', cmd], {
+    var shell = os.platform() === 'android' ? 'sh' : true
+    return proc.spawn(cmd, [], {
+      shell,
       stdio: 'inherit'
@@ -57,5 +59,7 @@ })
 
-  return proc.spawn(process.env.comspec || 'cmd.exe', ['/s', '/c', '"' + cmd + '"'], {
+  return proc.spawn(cmd, [], {
     windowsVerbatimArguments: true,
-    stdio: 'inherit'
+    stdio: 'inherit',
+    shell: true,
+    windowsHide: true
   })
@@ -62,0 +66,0 @@ }

package.json

 {
   "name": "node-gyp-build",
-  "version": "4.8.0",
+  "version": "4.8.1",
   "description": "Build tool and bindings loader for node-gyp that supports prebuilds",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

13408

increased by0.21%

Lines of code

265

increased by1.53%

Number of low supply chain risk alerts

19

decreased by-5%

No dependency changes