serverless-esbuild - npm Package Compare versions

Comparing version 1.35.2 to 1.35.3

dist/utils.d.ts

@@ -1,3 +0,2 @@
-/// <reference types="node" />
-import childProcess from 'child_process';
+import execa from 'execa';
 import type { IFiles } from './types';
@@ -18,6 +17,3 @@ export declare class SpawnError extends Error {
  */
-export declare function spawnProcess(command: string, args: string[], options: childProcess.SpawnOptionsWithoutStdio): Promise<{
-    stdout: string;
-    stderr: string;
-}>;
+export declare function spawnProcess(command: string, args: string[], options: execa.Options): execa.ExecaChildProcess<string>;
 /**
@@ -24,0 +20,0 @@ * Find a file by walking up parent directories

dist/utils.js

@@ -32,3 +32,3 @@ "use strict";
 const archiver_1 = __importDefault(require("archiver"));
-const child_process_1 = __importDefault(require("child_process"));
+const execa_1 = __importDefault(require("execa"));
 const function_1 = require("fp-ts/lib/function");
@@ -62,28 +62,3 @@ const IO = __importStar(require("fp-ts/lib/IO"));
 function spawnProcess(command, args, options) {
-    return new Promise((resolve, reject) => {
-        const child = child_process_1.default.spawn(command, args, options);
-        let stdout = '';
-        let stderr = '';
-        // Configure stream encodings
-        child.stdout.setEncoding('utf8');
-        child.stderr.setEncoding('utf8');
-        // Listen to stream events
-        child.stdout.on('data', (data) => {
-            stdout += data;
-        });
-        child.stderr.on('data', (data) => {
-            stderr += data;
-        });
-        child.on('error', (err) => {
-            reject(err);
-        });
-        child.on('close', (exitCode) => {
-            if (exitCode !== 0) {
-                reject(new SpawnError(`${command} ${args.join(' ')} failed with code ${exitCode}`, stdout, stderr));
-            }
-            else {
-                resolve({ stdout, stderr });
-            }
-        });
-    });
+    return (0, execa_1.default)(command, args, options);
 }
@@ -90,0 +65,0 @@ exports.spawnProcess = spawnProcess;

package.json

 {
   "name": "serverless-esbuild",
-  "version": "1.35.2",
+  "version": "1.35.3",
   "description": "Serverless plugin for zero-config JavaScript and TypeScript code bundling using extremely fast esbuild",
@@ -62,2 +62,3 @@ "keywords": [
     "chokidar": "^3.5.3",
+    "execa": "^5.1.1",
     "fp-ts": "^2.13.1",
@@ -64,0 +65,0 @@ "fs-extra": "^11.1.0",

Fixed alerts

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Improved metrics

Number of medium supply chain risk alerts

0

-100%

Worsened metrics

Total package byte prevSize

218622

-0.84%

Dependency count

15

7.14%

Lines of code

2351

-1.22%

Dependency changes

• + Added

  execa@^5.1.1

• + Added

  cross-spawn@7.0.6
  (transitive)

• + Added

  execa@5.1.1
  (transitive)

• + Added

  get-stream@6.0.1
  (transitive)

• + Added

  human-signals@2.1.0
  (transitive)

• + Added

  is-stream@2.0.1
  (transitive)

• + Added

  merge-stream@2.0.0
  (transitive)

• + Added

  mimic-fn@2.1.0
  (transitive)

• + Added

  npm-run-path@4.0.1
  (transitive)

• + Added

  onetime@5.1.2
  (transitive)

• + Added

  path-key@3.1.1
  (transitive)

• + Added

  shebang-command@2.0.0
  (transitive)

• + Added

  shebang-regex@3.0.0
  (transitive)

• + Added

  signal-exit@3.0.7
  (transitive)

• + Added

  strip-final-newline@2.0.0
  (transitive)