sq-native - npm Package Compare versions

Comparing version 1.0.5 to 1.0.6

index.js

@@ -13,2 +13,3 @@ /**
 const ARTEFACT_PATH = Path.join(__dirname, 'installed.json');
+const CURRENT_SETUP = require('./setupInfo');
 
@@ -150,3 +151,7 @@ let installArtefacts = {};
 
+    static getCurrentSetup() {
 
+        return CURRENT_SETUP;
+    }
+
     static clearAll() {
@@ -153,0 +158,0 @@

install.js

@@ -12,7 +12,3 @@ /**
 
-const TARGET = {
-    platform: OS.platform(),
-    libc: LIB_C_FAMILLY,
-    arch: OS.arch()
-}
+const TARGET = require('./setupInfo');
 const TAR_PATH = Path.join(__dirname, 'vendor', `${OS.platform()}-${LIB_C_FAMILLY}`, OS.arch(), 'node-universal.tar.gz');
@@ -22,2 +18,3 @@ const TARGET_PATH = Path.join(__dirname, 'bindings');
 
+// TODO(@Simon): collect install errors and write them in file for easier debug/reporting
 try {
@@ -24,0 +21,0 @@ FS.mkdirSync(TARGET_PATH);

package.json

 {
   "name": "sq-native",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "description": "Node.js binding for libsqreen",
@@ -5,0 +5,0 @@ "main": "index.js",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 2 instances in 1 package

Improved metrics

Number of package files

8

increased by14.29%

Lines of code

193

increased by7.82%

Number of medium supply chain risk alerts

0

decreased by-100%

Worsened metrics

Total package byte prevSize

2942170

decreased by-20.55%

No dependency changes