onnxruntime-node - npm Package Compare versions

Comparing version 1.17.0 to 1.17.3-rev.1

dist/backend.js

@@ -43,3 +43,3 @@ "use strict";
         return new Promise((resolve, reject) => {
-            process.nextTick(() => {
+            setImmediate(() => {
                 try {
@@ -63,3 +63,3 @@ resolve(__classPrivateFieldGet(this, _OnnxruntimeSessionHandler_inferenceSession, "f").run(feeds, fetches, options));
         return new Promise((resolve, reject) => {
-            process.nextTick(() => {
+            setImmediate(() => {
                 try {
@@ -66,0 +66,0 @@ resolve(new OnnxruntimeSessionHandler(pathOrBuffer, options || {}));

dist/version.js

@@ -8,3 +8,3 @@ "use strict";
 // Do not modify file content manually.
-exports.version = '1.17.0';
+exports.version = '1.17.3-rev.1';
 //# sourceMappingURL=version.js.map

lib/backend.ts

@@ -39,3 +39,3 @@ // Copyright (c) Microsoft Corporation. All rights reserved.
     return new Promise((resolve, reject) => {
-      process.nextTick(() => {
+      setImmediate(() => {
         try {
@@ -60,3 +60,3 @@ resolve(this.#inferenceSession.run(feeds, fetches, options));
     return new Promise((resolve, reject) => {
-      process.nextTick(() => {
+      setImmediate(() => {
         try {
@@ -63,0 +63,0 @@ resolve(new OnnxruntimeSessionHandler(pathOrBuffer, options || {}));

lib/version.ts

@@ -7,2 +7,2 @@ // Copyright (c) Microsoft Corporation. All rights reserved.
 
-export const version = '1.17.0';
+export const version = '1.17.3-rev.1';

package.json

@@ -16,7 +16,9 @@ {
   },
-  "version": "1.17.0",
+  "version": "1.17.3-rev.1",
   "dependencies": {
-    "onnxruntime-common": "1.17.0"
+    "onnxruntime-common": "1.17.3",
+    "tar": "^7.0.1"
   },
   "scripts": {
+    "postinstall": "node ./script/install",
     "buildr": "tsc && node ./script/build --config=RelWithDebInfo",
@@ -23,0 +25,0 @@ "preprepare": "node -e \"require('node:fs').copyFileSync('./node_modules/long/index.d.ts', './node_modules/long/umd/index.d.ts')\"",

README.md

@@ -17,10 +17,14 @@ # ONNX Runtime Node.js Binding
 
-ONNXRuntime works on Node.js v12.x+ or Electron v5.x+.
+ONNXRuntime works on Node.js v16.x+ (recommend v18.x+) or Electron v15.x+ (recommend v28.x+).
 
-Following platforms are supported with pre-built binaries:
+The following table lists the supported versions of ONNX Runtime Node.js binding provided with pre-built binaries.
 
-- Windows x64 CPU NAPI_v3
-- Linux x64 CPU NAPI_v3
-- MacOS x64 CPU NAPI_v3
+| EPs/Platforms | Windows x64 | Windows arm64 | Linux x64         | Linux arm64 | MacOS x64 | MacOS arm64 |
+| ------------- | ----------- | ------------- | ----------------- | ----------- | --------- | ----------- |
+| CPU           | ✔️          | ✔️            | ✔️                | ✔️          | ✔️        | ✔️          |
+| DirectML      | ✔️          | ✔️            | ❌                | ❌          | ❌        | ❌          |
+| CUDA          | ❌          | ❌            | ✔️<sup>\[1]</sup> | ❌          | ❌        | ❌          |
 
+- \[1]: CUDA v11.8.
+
 To use on platforms without pre-built binaries, you can build Node.js binding from source and consume it by `npm install <onnxruntime_repo_root>/js/node/`. See also [instructions](https://onnxruntime.ai/docs/build/inferencing.html#apis-and-language-bindings) for building ONNX Runtime Node.js binding locally.
@@ -32,4 +36,18 @@
 
+## CUDA EP Installation
+
+To use CUDA EP, you need to install the CUDA EP binaries. By default, the CUDA EP binaries are installed automatically when you install the package. If you want to skip the installation, you can pass the `--onnxruntime-node-install-cuda=skip` flag to the installation command.
+
+```
+npm install onnxruntime-node --onnxruntime-node-install-cuda=skip
+```
+
+You can also use this flag to specify the version of the CUDA: (v11 or v12)
+
+```
+npm install onnxruntime-node --onnxruntime-node-install-cuda=v12
+```
+
 ## License
 
 License information can be found [here](https://github.com/microsoft/onnxruntime/blob/main/README.md#license).

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Install scripts

Supply chain risk

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 7 instances in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 6 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 2 instances in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 4 instances in 1 package

Improved metrics

Total package byte prevSize

139387685

increased by36.9%

Number of package files

34

increased by21.43%

Lines of code

642

increased by165.29%

Number of lines in readme file

52

increased by52.94%

Worsened metrics

Dependency count

2

increased by100%

Number of low quality alerts

2

increased by100%

Number of high supply chain risk alerts

1

increased byInfinity%

Number of low supply chain risk alerts

12

increased by1100%

Number of medium supply chain risk alerts

11

increased by83.33%

Dependency changes

• + Addedtar@^7.0.1

• + Added@isaacs/cliui@8.0.2(transitive)

• + Added@isaacs/fs-minipass@4.0.1(transitive)

• + Added@pkgjs/parseargs@0.11.0(transitive)

• + Addedansi-regex@5.0.16.1.0(transitive)

• + Addedansi-styles@4.3.06.2.1(transitive)

• + Addedbalanced-match@1.0.2(transitive)

• + Addedbrace-expansion@2.0.1(transitive)

• + Addedchownr@3.0.0(transitive)

• + Addedcolor-convert@2.0.1(transitive)

• + Addedcolor-name@1.1.4(transitive)

• + Addedcross-spawn@7.0.5(transitive)

• + Addedeastasianwidth@0.2.0(transitive)

• + Addedemoji-regex@8.0.09.2.2(transitive)

• + Addedforeground-child@3.3.0(transitive)

• + Addedglob@10.4.5(transitive)

• + Addedis-fullwidth-code-point@3.0.0(transitive)

• + Addedisexe@2.0.0(transitive)

• + Addedjackspeak@3.4.3(transitive)

• + Addedlru-cache@10.4.3(transitive)

• + Addedminimatch@9.0.5(transitive)

• + Addedminipass@7.1.2(transitive)

• + Addedminizlib@3.0.1(transitive)

• + Addedmkdirp@3.0.1(transitive)

• + Addedonnxruntime-common@1.17.3(transitive)

• + Addedpackage-json-from-dist@1.0.1(transitive)

• + Addedpath-key@3.1.1(transitive)

• + Addedpath-scurry@1.11.1(transitive)

• + Addedrimraf@5.0.10(transitive)

• + Addedshebang-command@2.0.0(transitive)

• + Addedshebang-regex@3.0.0(transitive)

• + Addedsignal-exit@4.1.0(transitive)

• + Addedstring-width@4.2.35.1.2(transitive)

• + Addedstrip-ansi@6.0.17.1.0(transitive)

• + Addedtar@7.4.3(transitive)

• + Addedwhich@2.0.2(transitive)

• + Addedwrap-ansi@7.0.08.1.0(transitive)

• + Addedyallist@5.0.0(transitive)

• - Removedonnxruntime-common@1.17.0(transitive)

• Updatedonnxruntime-common@1.17.3