shelljs - npm Package Compare versions

Comparing version 0.8.0 to 0.8.1

package.json

 {
   "name": "shelljs",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "Portable Unix shell commands for Node.js",
@@ -5,0 +5,0 @@ "keywords": [

src/exec-child.js

@@ -8,4 +8,7 @@ if (require.main !== module) {
 
-var params = JSON.parse(process.argv[2]);
+var paramFilePath = process.argv[2];
 
+var serializedParams = fs.readFileSync(paramFilePath, 'utf8');
+var params = JSON.parse(serializedParams);
+
 var cmd = params.command;
@@ -12,0 +15,0 @@ var execOptions = params.execOptions;

src/exec.js

@@ -24,2 +24,3 @@ var common = require('./common');
   var tempDir = _tempDir();
+  var paramsFile = path.resolve(tempDir + '/' + common.randomFileName());
   var stderrFile = path.resolve(tempDir + '/' + common.randomFileName());
@@ -36,2 +37,3 @@ var stdoutFile = path.resolve(tempDir + '/' + common.randomFileName());
 
+  if (fs.existsSync(paramsFile)) common.unlinkSync(paramsFile);
   if (fs.existsSync(stderrFile)) common.unlinkSync(stderrFile);
@@ -50,5 +52,7 @@ if (fs.existsSync(stdoutFile)) common.unlinkSync(stdoutFile);
 
+  fs.writeFileSync(paramsFile, JSON.stringify(paramsToSerialize), 'utf8');
+
   var execArgs = [
     path.join(__dirname, 'exec-child.js'),
-    JSON.stringify(paramsToSerialize),
+    paramsFile,
   ];
@@ -90,2 +94,3 @@
   // No biggie if we can't erase the files now -- they're in a temp dir anyway
+  try { common.unlinkSync(paramsFile); } catch (e) {}
   try { common.unlinkSync(stderrFile); } catch (e) {}
@@ -92,0 +97,0 @@ try { common.unlinkSync(stdoutFile); } catch (e) {}

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

202952

increased by1.21%

Lines of code

3153

increased by0.19%

Number of low supply chain risk alerts

40

decreased by-9.09%

No dependency changes