node-llama-cpp
Advanced tools
Comparing version
{ | ||
"name": "node-llama-cpp", | ||
"version": "0.0.1", | ||
"description": "", | ||
"version": "1.1.0", | ||
"description": "node.js bindings for llama.cpp", | ||
"main": "dist/index.js", | ||
"type": "module", | ||
"types": "./dist/index.d.ts", | ||
"bin": { | ||
"node-llama-cpp": "./dist/cli/cli.js" | ||
}, | ||
"files": [ | ||
"dist/", | ||
"llama/", | ||
"llamaBins/", | ||
"package.json", | ||
"README.md" | ||
"README.md", | ||
"LICENSE" | ||
], | ||
"exports": { | ||
".": { | ||
"default": "./dist/index.js", | ||
"import": "./dist/index.js", | ||
"node": "./dist/index.js", | ||
"types": "./dist/index.d.ts" | ||
}, | ||
"./commands": { | ||
"default": "./dist/commands.js", | ||
"import": "./dist/commands.js", | ||
"node": "./dist/commands.js", | ||
"types": "./dist/commands.d.ts" | ||
}, | ||
"./commands.js": { | ||
"default": "./dist/commands.js", | ||
"import": "./dist/commands.js", | ||
"node": "./dist/commands.js", | ||
"types": "./dist/commands.d.ts" | ||
} | ||
}, | ||
"engines": { | ||
"node": ">=18.0.0" | ||
}, | ||
"scripts": { | ||
"postinstall": "node ./dist/cli/cli.js postinstall", | ||
"prepare": "[ $CI = true ] || [ -d '.husky/_' ] || husky install", | ||
@@ -19,2 +49,4 @@ "prebuild": "rm -rf ./dist ./tsconfig.tsbuildinfo", | ||
"watch": "tsc --build tsconfig.json --watch --force", | ||
"node-gyp-llama": "cd llama && node-gyp", | ||
"node-gyp-llama-build": "cd llama && cross-env CXXFLAGS=\"-fexceptions\" CFLAGS=\"-fexceptions\" node-gyp build -j max", | ||
"test": "npm run test:typescript && npm run lint:eslint", | ||
@@ -24,3 +56,3 @@ "test:typescript": "tsc --build tsconfig.json --dry --force", | ||
"lint:eslint": "eslint --ext .js --ext .ts .", | ||
"lint:fix": "npm run lint:eslint -- --fix", | ||
"format": "npm run lint:eslint -- --fix", | ||
"clean": "rm -rf ./node_modules ./dist ./tsconfig.tsbuildinfo" | ||
@@ -30,3 +62,3 @@ }, | ||
"type": "git", | ||
"url": "git+ssh://git@github.com:giladgd/node-llama-cpp.git" | ||
"url": "git+https://github.com/withcatai/node-llama-cpp.git" | ||
}, | ||
@@ -37,7 +69,12 @@ "keywords": [ | ||
"bindings", | ||
"ai", | ||
"node-gyp", | ||
"ai", | ||
"prebuilt-binaries", | ||
"llm", | ||
"ggml", | ||
"ggmlv3" | ||
"ggmlv3", | ||
"raspberry-pi", | ||
"self-hosted", | ||
"local", | ||
"catai" | ||
], | ||
@@ -47,9 +84,15 @@ "author": "Gilad S.", | ||
"bugs": { | ||
"url": "https://github.com/giladgd/node-llama-cpp/issues" | ||
"url": "https://github.com/withcatai/node-llama-cpp/issues" | ||
}, | ||
"homepage": "https://github.com/giladgd/node-llama-cpp#readme", | ||
"homepage": "https://github.com/withcatai/node-llama-cpp#readme", | ||
"devDependencies": { | ||
"@commitlint/cli": "^17.7.1", | ||
"@commitlint/config-conventional": "^17.7.0", | ||
"@types/bytes": "^3.1.1", | ||
"@types/cli-progress": "^3.11.0", | ||
"@types/cross-spawn": "^6.0.2", | ||
"@types/fs-extra": "^11.0.1", | ||
"@types/node": "^20.4.9", | ||
"@types/uuid": "^9.0.2", | ||
"@types/yargs": "^17.0.24", | ||
"@typescript-eslint/eslint-plugin": "^6.3.0", | ||
@@ -64,4 +107,22 @@ "@typescript-eslint/parser": "^6.3.0", | ||
"tslib": "^2.6.1", | ||
"typescript": "^5.1.6" | ||
"typescript": "^5.1.6", | ||
"zx": "^7.2.3" | ||
}, | ||
"dependencies": { | ||
"bytes": "^3.1.2", | ||
"chalk": "^5.3.0", | ||
"cli-progress": "^3.12.0", | ||
"cross-env": "^7.0.3", | ||
"cross-spawn": "^7.0.3", | ||
"env-var": "^7.3.1", | ||
"fs-extra": "^11.1.1", | ||
"node-addon-api": "^7.0.0", | ||
"node-downloader-helper": "^2.1.9", | ||
"node-gyp": "^9.4.0", | ||
"node-stream-zip": "^1.15.0", | ||
"octokit": "^3.1.0", | ||
"ora": "^7.0.1", | ||
"uuid": "^9.0.0", | ||
"yargs": "^17.7.2" | ||
} | ||
} |
Install scripts
Supply chain riskInstall scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.
Found 1 instance in 1 package
Native code
Supply chain riskContains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.
Found 1 instance in 1 package
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Found 1 instance in 1 package
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Found 1 instance in 1 package
Dynamic require
Supply chain riskDynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.
Found 1 instance in 1 package
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 1 instance in 1 package
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Found 1 instance in 1 package
Mixed license
License(Experimental) Package contains multiple licenses.
Found 1 instance in 1 package
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Found 1 instance in 1 package
No bug tracker
MaintenancePackage does not have a linked bug tracker in package.json.
Found 1 instance in 1 package
No v1
QualityPackage is not semver >=1. This means it is not stable and does not support ^ ranges.
Found 1 instance in 1 package
No website
QualityPackage does not have a website.
Found 1 instance in 1 package
25176501
1375665.08%111
5450%981
Infinity%0
-100%0
-100%211
21000%15
Infinity%20
53.85%1
Infinity%1
Infinity%14
Infinity%37
3600%+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added
+ Added