v8-debug - npm Package Compare versions

Comparing version 0.6.2 to 0.7.0

package.json

 {
   "name": "v8-debug",
-  "version": "0.6.2",
+  "version": "0.7.0",
   "description": "v8 debugger extending API",
@@ -41,3 +41,3 @@ "homepage": "http://github.com/node-inspector/v8-debug",
     "preinstall": "node -e 'process.exit(0)'",
-    "prepublish": "node tools/prepublish.js",
+    "prepublish": "node ./tools/prepublish.js",
     "install": "node-pre-gyp install --fallback-to-build",
@@ -44,0 +44,0 @@ "rebuild": "node-pre-gyp rebuild",

tools/prepublish.js

@@ -1,1 +0,40 @@
-process.exit(1);
+if (process.env.CI) process.exit(0);
+
+var extend = require('util')._extend;
+var gyp = require('node-pre-gyp');
+
+var versions = ['0.10.0', '0.12.0', '4.0.0', '5.0.0'];
+var matrix = {
+  x64: ['win32', 'linux', 'darwin'],
+  ia32: ['win32']
+};
+
+var targets = [];
+Object.keys(matrix).forEach(function(arch) {
+  matrix[arch].forEach(function(platform) {
+    versions.forEach(function(version) {
+      targets.push({
+        target: version,
+        target_platform: platform,
+        target_arch: arch
+      });
+    });
+  });
+}, []);
+
+iterate();
+
+function iterate(err) {
+  if (err) {
+    console.log(err.message);
+    return process.exit(1);
+  }
+
+  var target = targets.pop();
+
+  if (!target) process.exit(0);
+
+  var prog = extend(new gyp.Run(), {opts: target});
+
+  prog.commands.install([], iterate);
+}

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Native code

Supply chain risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 32 instances in 1 package

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Network access

Supply chain risk

This module accesses the network.

Found 1 instance in 1 package

Shell access

Supply chain risk

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 1 instance in 1 package

Uses eval

Supply chain risk

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2643357

increased by1978.58%

Number of package files

46

increased by109.09%

Number of low supply chain risk alerts

4

decreased by-20%

Worsened metrics

Lines of code

2548

decreased by-6.8%

Number of medium supply chain risk alerts

33

increased by725%

No dependency changes