pnpm - npm Package Compare versions

Comparing version 10.0.0-beta.2 to 10.0.0-beta.3

dist/node_modules/cross-spawn/lib/enoent.js

@@ -27,3 +27,3 @@ 'use strict';
         if (name === 'exit') {
-            const err = verifyENOENT(arg1, parsed, 'spawn');
+            const err = verifyENOENT(arg1, parsed);
 
@@ -30,0 +30,0 @@ if (err) {

dist/node_modules/cross-spawn/lib/util/escape.js

@@ -18,6 +18,8 @@ 'use strict';
     // Algorithm below is based on https://qntm.org/cmd
+    // It's slightly altered to disable JS backtracking to avoid hanging on specially crafted input
+    // Please see https://github.com/moxystudio/node-cross-spawn/pull/160 for more information
 
     // Sequence of backslashes followed by a double quote:
     // double up all the backslashes and escape the double quote
-    arg = arg.replace(/(\\*)"/g, '$1$1\\"');
+    arg = arg.replace(/(?=(\\+?)?)\1"/g, '$1$1\\"');
 
@@ -27,3 +29,3 @@ // Sequence of backslashes followed by the end of the string
     // double up all the backslashes
-    arg = arg.replace(/(\\*)$/, '$1$1');
+    arg = arg.replace(/(?=(\\+?)?)\1$/, '$1$1');
 
@@ -30,0 +32,0 @@ // All other backslashes occur literally

dist/node_modules/cross-spawn/package.json

 {
   "name": "cross-spawn",
-  "version": "7.0.3",
+  "version": "7.0.5",
   "description": "Cross platform child_process#spawn and child_process#spawnSync",
@@ -5,0 +5,0 @@ "keywords": [

package.json

 {
   "name": "pnpm",
   "description": "Fast, disk space efficient package manager",
-  "version": "10.0.0-beta.2",
+  "version": "10.0.0-beta.3",
   "bin": {
@@ -6,0 +6,0 @@ "pnpm": "bin/pnpm.cjs",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

17508819

increased by0.88%

Number of package files

901

increased by0.11%

Lines of code

79678

increased by0.03%

No dependency changes