titanium - npm Package Compare versions

Comparing version 6.1.1 to 7.0.0-beta1

package.json

 {
-	"about": {
-		"name": "Titanium Command-Line Interface",
-		"author": "TiDev",
-		"copyright": "Copyright TiDev, Inc. 4/7/2022-Present. All Rights Reserved.",
-		"id": "com.appcelerator.titanium.cli"
+	"name": "titanium",
+	"version": "7.0.0-beta1",
+	"publishConfig": {
+		"tag": "next"
 	},
-	"name": "titanium",
-	"description": "TiDev Titanium Command line",
+	"author": "TiDev, Inc. <[e-mail]>",
+	"description": "Command line interface for building Titanium SDK apps",
+	"type": "module",
 	"keywords": [
 		"titanium",
+		"tidev",
 		"mobile",
 		"ios",
 		"iphone",
-		"android",
-		"blackberry",
-		"html5",
-		"mobileweb",
-		"mobile web",
-		"appc-client"
+		"android"
 	],
-	"version": "6.1.1",
-	"author": "TiDev, Inc. <[e-mail]>",
-	"bugs": {
-		"url": "https://github.com/tidev/titanium_mobile/issues"
-	},
-	"repository": {
-		"type": "git",
-		"url": "git://github.com/tidev/titanium.git"
-	},
+	"homepage": "https://titaniumsdk.com",
+	"bugs": "https://github.com/tidev/titanium-cli/issues",
+	"repository": "https://github.com/tidev/titanium-cli",
 	"preferGlobal": true,
 	"dependencies": {
-		"async": "^3.2.4",
-		"colors": "1.4.0",
-		"fields": "0.1.24",
-		"got": "^11.8.5",
-		"humanize": "0.0.9",
-		"node-appc": "^1.1.5",
-		"request": "2.88.2",
-		"sprintf": "0.1.5",
-		"tmp": "^0.2.1",
-		"winston": "2.4.6",
-		"yauzl": "^2.10.0"
+		"@xmldom/xmldom": "0.8.10",
+		"chalk": "5.3.0",
+		"commander": "11.1.0",
+		"execa": "8.0.1",
+		"pretty-bytes": "6.1.1",
+		"prompts": "2.4.2",
+		"semver": "7.5.4",
+		"undici": "6.3.0",
+		"which": "4.0.0",
+		"wrap-ansi": "9.0.0",
+		"xpath": "0.0.34",
+		"yauzl": "2.10.0"
 	},
 	"devDependencies": {
-		"@commitlint/cli": "^12.1.4",
-		"@commitlint/config-conventional": "^12.1.4",
-		"@seadub/danger-plugin-dependencies": "1.0.0",
-		"@seadub/danger-plugin-eslint": "^2.0.0",
-		"@seadub/danger-plugin-junit": "0.3.0",
-		"danger": "^10.9.0",
-		"eslint": "^7.32.0",
-		"eslint-config-axway": "^6.0.2",
-		"eslint-plugin-mocha": "^9.0.0",
-		"fs-extra": "^9.1.0",
-		"husky": "^6.0.0",
-		"lint-staged": "^11.2.6",
-		"mocha": "^8.4.0",
-		"mocha-jenkins-reporter": "^0.4.7",
-		"nyc": "^15.1.0",
-		"semver": "^7.3.7",
-		"should": "^13.2.3"
+		"@reporters/github": "1.5.4",
+		"@vitest/coverage-istanbul": "1.1.3",
+		"c8": "9.0.0",
+		"eslint": "8.56.0",
+		"eslint-plugin-promise": "6.1.1",
+		"eslint-plugin-security": "2.1.0",
+		"fs-extra": "11.2.0",
+		"glob": "10.3.10",
+		"memory-streams": "0.1.3",
+		"proxy": "2.1.1"
 	},
 	"license": "Apache-2.0",
 	"bin": {
-		"ti": "./bin/titanium",
-		"titanium": "./bin/titanium"
+		"ti": "./bin/ti.js",
+		"titanium": "./bin/ti.js"
 	},
-	"main": "./lib/titanium",
-	"directories": {
-		"lib": "./lib"
-	},
+	"files": [
+		"./src"
+	],
 	"scripts": {
-		"lint": "eslint .",
-		"test": "npm run lint && npm run unit-test",
-		"unit-test": "nyc mocha \"tests/**/test-*.js\"",
-		"prepare": "husky install"
+		"coverage": "node scripts/test.js --coverage",
+		"lint": "eslint --cache \"src/**/*.js\"",
+		"test": "node scripts/test.js",
+		"test-only": "node scripts/test.js --only"
 	},
-	"mocha": {
-		"timeout": 3000,
-		"check-leaks": true,
-		"globals": [
-			"Hyperloop",
-			"HyperloopObject"
-		],
-		"reporter": "mocha-jenkins-reporter",
-		"reporter-option": "junit_report_path=junit_report.xml"
-	},
-	"nyc": {
-		"check-coverage": false,
-		"lines": 55,
-		"statements": 55,
-		"functions": 49,
-		"branches": 44,
-		"exclude": [
-			"tests/**/*.js",
-			"locales/**/*.js"
-		],
-		"reporter": [
-			"cobertura",
-			"text"
-		]
-	},
 	"engines": {
-		"node": ">=14.15"
+		"node": ">=18"
 	},
-	"lint-staged": {
-		"*.js": "eslint"
-	},
-	"commitlint": {
-		"extends": [
-			"@commitlint/config-conventional"
-		]
-	}
+	"packageManager": "pnpm@8.7.4"
 }

README.md

@@ -7,3 +7,3 @@ # Titanium CLI
 
-The Titanium CLI requires [Node.js 14](http://nodejs.org/dist/) or newer.
+The Titanium CLI requires [Node.js 18](http://nodejs.org/dist/) or newer.
 
@@ -14,3 +14,3 @@ ## Installation
 
-After install, Titanium CLI is executable as `ti`    
+After install, Titanium CLI is executable as `ti` or `titanium`.
 
@@ -22,3 +22,3 @@ ## Obtaining a Titanium SDK
     # stable release (recommended)
-    titanium sdk install --default
+    titanium sdk install
 
@@ -41,6 +41,11 @@ ## Setting up the Titanium CLI
 
-**Implementation not complete**
+    # list all config settings
+    titanium config
 
-    titanium config <setting> <value>
+    # get a config setting
+    titanium config <key>
 
+    # set a config setting
+    titanium config <key> <value>
+
 ### help
@@ -52,8 +57,4 @@
 
-    titanium help
-
     titanium --help
 
-    titanium help <command>
-
     titanium <command> --help
@@ -75,6 +76,2 @@
 
-Download, install <version>, and set as default SDK.
-
-    titanium sdk install <version> --default
-
 #### sdk uninstall
@@ -115,3 +112,3 @@
 
-    titanium info -o json
+    titanium info --json
 
@@ -129,4 +126,4 @@ ## Hacking the Titanium CLI
 
-    git clone [e-mail]:tidev/titanium.git
-    cd titanium
+    git clone [e-mail]:tidev/titanium-cli.git
+    cd titanium-cli
     npm install
@@ -139,20 +136,4 @@ sudo npm link
 
-    node forge test
+    npm test
 
-### Running Code Coverage
-
-To generate the code coverage, you first must install [node-jscoverage](https://github.com/visionmedia/node-jscoverage). The easist way to do this is run:
-
-    git clone [e-mail]:visionmedia/node-jscoverage.git
-    cd node-jscoverage
-    ./configure
-    make
-    sudo make install
-
-Then run:
-
-	node forge test-cov
-
-It will generate a file called _coverage.html_ in the Titanium CLI directory.
-
 ## Contributing
@@ -182,3 +163,3 @@
 
-Join our growing Slack community by visiting https://slack.tidev.io
+Join our growing Slack community by visiting https://slack.tidev.io!
 
@@ -185,0 +166,0 @@ ## Legal

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

No bug tracker

Maintenance

Package does not have a linked bug tracker in package.json.

Found 1 instance in 1 package

No repository

Supply chain risk

Package does not have a linked source code repository. Without this field, a package will have no reference to the location of the source code use to generate the package.

Found 1 instance in 1 package

No v1

Quality

Package is not semver >=1. This means it is not stable and does not support ^ ranges.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Debug access

Supply chain risk

Uses debug, reflection and dynamic code execution features.

Found 1 instance in 1 package

Dynamic require

Supply chain risk

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

Found 1 instance in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 5 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

No website

Quality

Package does not have a website.

Found 1 instance in 1 package

Improved metrics

Dev dependency count

10

decreased by-41.18%

Number of low supply chain risk alerts

12

decreased by-65.71%

Is type module

Yes

Worsened metrics

Total package byte prevSize

194684

decreased by-38.67%

Dependency count

12

increased by9.09%

Number of package files

35

decreased by-10.26%

Lines of code

5757

decreased by-27.91%

Number of low maintenance alerts

1

increased byInfinity%

Number of lines in readme file

159

decreased by-10.67%

Dependency changes

• + Added@xmldom/xmldom@0.8.10

• + Addedchalk@5.3.0

• + Addedcommander@11.1.0

• + Addedexeca@8.0.1

• + Addedpretty-bytes@6.1.1

• + Addedprompts@2.4.2

• + Addedsemver@7.5.4

• + Addedundici@6.3.0

• + Addedwhich@4.0.0

• + Addedwrap-ansi@9.0.0

• + Addedxpath@0.0.34

• + Added@fastify/busboy@2.1.1(transitive)

• + Addedansi-regex@6.1.0(transitive)

• + Addedansi-styles@6.2.1(transitive)

• + Addedchalk@5.3.0(transitive)

• + Addedcommander@11.1.0(transitive)

• + Addedcross-spawn@7.0.5(transitive)

• + Addedemoji-regex@10.4.0(transitive)

• + Addedexeca@8.0.1(transitive)

• + Addedget-east-asian-width@1.3.0(transitive)

• + Addedget-stream@8.0.1(transitive)

• + Addedhuman-signals@5.0.0(transitive)

• + Addedis-stream@3.0.0(transitive)

• + Addedisexe@2.0.03.1.1(transitive)

• + Addedkleur@3.0.3(transitive)

• + Addedmerge-stream@2.0.0(transitive)

• + Addedmimic-fn@4.0.0(transitive)

• + Addednpm-run-path@5.3.0(transitive)

• + Addedonetime@6.0.0(transitive)

• + Addedpath-key@3.1.14.0.0(transitive)

• + Addedpretty-bytes@6.1.1(transitive)

• + Addedprompts@2.4.2(transitive)

• + Addedsemver@7.5.4(transitive)

• + Addedshebang-command@2.0.0(transitive)

• + Addedshebang-regex@3.0.0(transitive)

• + Addedsignal-exit@4.1.0(transitive)

• + Addedsisteransi@1.0.5(transitive)

• + Addedstring-width@7.2.0(transitive)

• + Addedstrip-ansi@7.1.0(transitive)

• + Addedstrip-final-newline@3.0.0(transitive)

• + Addedundici@6.3.0(transitive)

• + Addedwhich@2.0.24.0.0(transitive)

• + Addedwrap-ansi@9.0.0(transitive)

• + Addedxpath@0.0.34(transitive)

• - Removedasync@^3.2.4

• - Removedcolors@1.4.0

• - Removedfields@0.1.24

• - Removedgot@^11.8.5

• - Removedhumanize@0.0.9

• - Removednode-appc@^1.1.5

• - Removedrequest@2.88.2

• - Removedsprintf@0.1.5

• - Removedtmp@^0.2.1

• - Removedwinston@2.4.6

• - Removed@sindresorhus/is@4.6.0(transitive)

• - Removed@szmarczak/http-timer@4.0.6(transitive)

• - Removed@types/cacheable-request@6.0.3(transitive)

• - Removed@types/http-cache-semantics@4.0.4(transitive)

• - Removed@types/keyv@3.1.4(transitive)

• - Removed@types/node@22.9.0(transitive)

• - Removed@types/responselike@1.0.3(transitive)

• - Removedajv@6.12.6(transitive)

• - Removedasn1@0.2.6(transitive)

• - Removedassert-plus@1.0.0(transitive)

• - Removedasync@3.2.6(transitive)

• - Removedasynckit@0.4.0(transitive)

• - Removedat-least-node@1.0.0(transitive)

• - Removedaws-sign2@0.7.0(transitive)

• - Removedaws4@1.13.2(transitive)

• - Removedbalanced-match@1.0.2(transitive)

• - Removedbcrypt-pbkdf@1.0.2(transitive)

• - Removedbrace-expansion@1.1.11(transitive)

• - Removedcacheable-lookup@5.0.4(transitive)

• - Removedcacheable-request@7.0.4(transitive)

• - Removedcaseless@0.12.0(transitive)

• - Removedclone-response@1.0.3(transitive)

• - Removedcolors@0.6.21.0.31.4.0(transitive)

• - Removedcombined-stream@1.0.8(transitive)

• - Removedconcat-map@0.0.1(transitive)

• - Removedcore-util-is@1.0.2(transitive)

• - Removedcycle@1.0.3(transitive)

• - Removeddashdash@1.14.1(transitive)

• - Removeddecompress-response@6.0.0(transitive)

• - Removeddefer-to-connect@2.0.1(transitive)

• - Removeddelayed-stream@1.0.0(transitive)

• - Removedecc-jsbn@0.1.2(transitive)

• - Removedend-of-stream@1.4.4(transitive)

• - Removedextend@3.0.2(transitive)

• - Removedextsprintf@1.3.0(transitive)

• - Removedeyes@0.1.8(transitive)

• - Removedfast-deep-equal@3.1.3(transitive)

• - Removedfast-json-stable-stringify@2.1.0(transitive)

• - Removedfields@0.1.24(transitive)

• - Removedforever-agent@0.6.1(transitive)

• - Removedform-data@2.3.3(transitive)

• - Removedfs-extra@9.1.0(transitive)

• - Removedfs.realpath@1.0.0(transitive)

• - Removedget-stream@5.2.0(transitive)

• - Removedgetpass@0.1.7(transitive)

• - Removedglob@7.2.3(transitive)

• - Removedgot@11.8.6(transitive)

• - Removedgraceful-fs@4.2.11(transitive)

• - Removedhar-schema@2.0.0(transitive)

• - Removedhar-validator@5.1.5(transitive)

• - Removedhttp-cache-semantics@4.1.1(transitive)

• - Removedhttp-signature@1.2.0(transitive)

• - Removedhttp2-wrapper@1.0.3(transitive)

• - Removedhumanize@0.0.9(transitive)

• - Removedinflight@1.0.6(transitive)

• - Removedinherits@2.0.4(transitive)

• - Removedis-typedarray@1.0.0(transitive)

• - Removedisstream@0.1.2(transitive)

• - Removedjsbn@0.1.1(transitive)

• - Removedjson-buffer@3.0.1(transitive)

• - Removedjson-schema@0.4.0(transitive)

• - Removedjson-schema-traverse@0.4.1(transitive)

• - Removedjson-stringify-safe@5.0.1(transitive)

• - Removedjsonfile@6.1.0(transitive)

• - Removedjsprim@1.4.2(transitive)

• - Removedkeypress@0.2.1(transitive)

• - Removedkeyv@4.5.4(transitive)

• - Removedlowercase-keys@2.0.0(transitive)

• - Removedmime-db@1.52.0(transitive)

• - Removedmime-types@2.1.35(transitive)

• - Removedmimic-response@1.0.13.1.0(transitive)

• - Removedminimatch@3.1.2(transitive)

• - Removedminimist@1.2.8(transitive)

• - Removedmkdirp@0.5.6(transitive)

• - Removednode-appc@1.1.7(transitive)

• - Removednormalize-url@6.1.0(transitive)

• - Removedoauth-sign@0.9.0(transitive)

• - Removedonce@1.4.0(transitive)

• - Removedp-cancelable@2.1.1(transitive)

• - Removedpath-is-absolute@1.0.1(transitive)

• - Removedperformance-now@2.1.0(transitive)

• - Removedpsl@1.10.0(transitive)

• - Removedpump@3.0.2(transitive)

• - Removedpunycode@2.3.1(transitive)

• - Removedqs@6.5.3(transitive)

• - Removedquick-lru@5.1.1(transitive)

• - Removedrequest@2.88.2(transitive)

• - Removedresolve-alpn@1.2.1(transitive)

• - Removedresponselike@2.0.1(transitive)

• - Removedrimraf@2.6.3(transitive)

• - Removedsafe-buffer@5.2.1(transitive)

• - Removedsafer-buffer@2.1.2(transitive)

• - Removedsemver@7.3.8(transitive)

• - Removedsprintf@0.1.5(transitive)

• - Removedsshpk@1.18.0(transitive)

• - Removedstack-trace@0.0.10(transitive)

• - Removedtemp@0.9.4(transitive)

• - Removedtmp@0.2.3(transitive)

• - Removedtough-cookie@2.5.0(transitive)

• - Removedtunnel-agent@0.6.0(transitive)

• - Removedtweetnacl@0.14.5(transitive)

• - Removedundici-types@6.19.8(transitive)

• - Removeduniversalify@2.0.1(transitive)

• - Removeduri-js@4.4.1(transitive)

• - Removeduuid@3.4.09.0.1(transitive)

• - Removedverror@1.10.0(transitive)

• - Removedwinston@2.4.6(transitive)

• - Removedwrappy@1.0.2(transitive)

• Updatedyauzl@2.10.0