react-native-pod - npm Package Compare versions

Comparing version 1.6.0 to 1.7.0

bin/postlink.js

@@ -13,9 +13,21 @@ #!/usr/bin/env node
 };
+var doFix = false;
 dependencies.map(dependency => {
   const package = require(path.resolve(nodepath, dependency, "package.json"));
   registerPodsFromPackage(package);
+  if (package.isSwift) doFix = true;
 });
 registerPodsFromPackage(package);
+if (package.isSwift) doFix = true;
 //Now that all my pods are here, let's run a pod install
+const mydir = process.cwd();
 process.chdir("./ios");
 spawnSync("pod", ["install"], opts);
+console.log("Do I fix pods?");
+if (doFix) {
+  console.log("Yes I do!");
+
+  const fixPods = require("../lib/fixPods");
+  process.chdir(mydir);
+  fixPods();
+}

package.json

 {
   "name": "react-native-pod",
-  "version": "1.6.0",
+  "version": "1.7.0",
   "description": "Automatically generate podfile for React Native",
@@ -17,3 +17,3 @@ "scripts": {
     "glob": "^7.1.2",
-    "xcode": "https://github.com/apache/cordova-node-xcode"
+    "xcode": "https://github.com/rhdeck/cordova-node-xcode"
   },
@@ -20,0 +20,0 @@ "rnpm": {

rnplugin/index.js

@@ -28,3 +28,9 @@ module.exports = [
       "Install all pods specified in the podfile. (Happens automatically at react-native link)"
+  },
+  {
+    name: "fixpods",
+    func: require("../lib/fixPods"),
+    description:
+      "Disable bitcode build in pod, can be important for swift-based projects"
   }
 ];

New alerts

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Fixed alerts

HTTP dependency

Supply chain risk

Contains a dependency which resolves to a remote HTTP URL which could be used to inject untrusted code and reduce overall package reliability.

Found 1 instance in 1 package

Manifest confusion

Supply chain risk

This package has inconsistent metadata. This could be malicious or caused by an error when publishing the package.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

19897

5.8%

Number of package files

29

3.57%

Lines of code

484

8.04%

Worsened metrics

Number of low supply chain risk alerts

15

7.14%

Dependency changes

• Updated

  xcode@https://github.com/rhdeck/cordova-node-xcode