onnxruntime-node - npm Package Compare versions

Comparing version 1.17.3 to 1.18.0-dev.20240430-204f1f59b9

dist/version.js

@@ -8,3 +8,3 @@ "use strict";
 // Do not modify file content manually.
-exports.version = '1.17.3';
+exports.version = '1.18.0-dev.20240430-204f1f59b9';
 //# sourceMappingURL=version.js.map

lib/version.ts

@@ -7,2 +7,2 @@ // Copyright (c) Microsoft Corporation. All rights reserved.
 
-export const version = '1.17.3';
+export const version = '1.18.0-dev.20240430-204f1f59b9';

package.json

@@ -16,5 +16,5 @@ {
   },
-  "version": "1.17.3",
+  "version": "1.18.0-dev.20240430-204f1f59b9",
   "dependencies": {
-    "onnxruntime-common": "1.17.3",
+    "onnxruntime-common": "1.18.0-dev.20240424-218b6b0a73",
     "tar": "^7.0.1"
@@ -21,0 +21,0 @@ },

script/build.js

@@ -50,2 +50,4 @@ "use strict";
 const ONNXRUNTIME_BUILD_DIR = buildArgs['onnxruntime-build-dir'];
+// --onnxruntime-generator=
+const ONNXRUNTIME_GENERATOR = buildArgs['onnxruntime-generator'];
 // --rebuild
@@ -80,2 +82,5 @@ const REBUILD = !!buildArgs.rebuild;
 }
+if (ONNXRUNTIME_GENERATOR && typeof ONNXRUNTIME_GENERATOR === 'string') {
+    args.push(`--CDONNXRUNTIME_GENERATOR=${ONNXRUNTIME_GENERATOR}`);
+}
 if (USE_DML) {
@@ -82,0 +87,0 @@ args.push('--CDUSE_DML=ON');

script/build.ts

@@ -26,2 +26,4 @@ // Copyright (c) Microsoft Corporation. All rights reserved.
 const ONNXRUNTIME_BUILD_DIR = buildArgs['onnxruntime-build-dir'];
+// --onnxruntime-generator=
+const ONNXRUNTIME_GENERATOR = buildArgs['onnxruntime-generator'];
 // --rebuild
@@ -59,2 +61,5 @@ const REBUILD = !!buildArgs.rebuild;
 }
+if (ONNXRUNTIME_GENERATOR && typeof ONNXRUNTIME_GENERATOR === 'string') {
+  args.push(`--CDONNXRUNTIME_GENERATOR=${ONNXRUNTIME_GENERATOR}`);
+}
 if (USE_DML) {
@@ -61,0 +66,0 @@ args.push('--CDUSE_DML=ON');

script/install.js

@@ -32,2 +32,4 @@ // Copyright (c) Microsoft Corporation. All rights reserved.
 //
+// Alternatively, use environment variable "ONNXRUNTIME_NODE_INSTALL_CUDA"
+//
 // If the flag is not provided, the script will only install the CUDA EP binaries when:
@@ -62,3 +64,3 @@ // - The platform is Linux/x64.
       ORT_VERSION}.tgz`,
-  12: `https://github.com/microsoft/onnxruntime/releases/download/v${ORT_VERSION}/onnxruntime-linux-x64-cuda12-${
+  12: `https://github.com/microsoft/onnxruntime/releases/download/v${ORT_VERSION}/onnxruntime-linux-x64-gpu-cuda12-${
       ORT_VERSION}.tgz`
@@ -84,11 +86,15 @@ }[INSTALL_CUDA_FLAG || tryGetCudaVersion()];
   Readable.fromWeb(res.body)
-      .pipe(tar.t())
-      .on('entry',
-          (entry) => {
-            const filename = path.basename(entry.path);
-            if (entry.type === 'File' && FILES.has(filename)) {
-              console.log(`Extracting "${filename}" to "${BIN_FOLDER}"...`);
-              entry.pipe(fs.createWriteStream(path.join(BIN_FOLDER, filename)));
-            }
-          })
+      .pipe(tar.t({
+        strict: true,
+        onentry: (entry) => {
+          const filename = path.basename(entry.path);
+          if (entry.type === 'File' && FILES.has(filename)) {
+            console.log(`Extracting "${filename}" to "${BIN_FOLDER}"...`);
+            entry.pipe(fs.createWriteStream(path.join(BIN_FOLDER, filename)));
+            entry.on('finish', () => {
+              console.log(`Finished extracting "${filename}".`);
+            });
+          }
+        }
+      }))
       .on('error', (err) => {
@@ -111,3 +117,3 @@ throw new Error(`Failed to extract the binaries: ${err.message}.
 function parseInstallCudaFlag() {
-  let flag = process.env.npm_config_onnxruntime_node_install_cuda;
+  let flag = process.env.ONNXRUNTIME_NODE_INSTALL_CUDA || process.env.npm_config_onnxruntime_node_install_cuda;
   if (!flag) {
@@ -125,2 +131,4 @@ for (let i = 0; i < process.argv.length; i++) {
     case 'true':
+    case '1':
+    case 'ON':
       return tryGetCudaVersion();
@@ -127,0 +135,0 @@ case 'v11':

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

168861528

increased by21.15%

Number of package files

35

increased by2.94%

Lines of code

652

increased by2.84%

Worsened metrics

Number of low quality alerts

2

increased by100%

Number of low supply chain risk alerts

12

increased by9.09%

Dependency changes

• + Addedonnxruntime-common@1.18.0-dev.20240424-218b6b0a73(transitive)

• - Removedonnxruntime-common@1.17.3(transitive)

• Updatedonnxruntime-common@1.18.0-dev.20240424-218b6b0a73