@b12k/gitleaks 8.30.1-v.2 → 8.30.1-v.4

package/dist/extract-archive.js

@@ -1,10 +1,19 @@
-import extract_zip from "extract-zip";
+import { execFile } from "node:child_process";
+import { promisify } from "node:util";
 import { extract } from "tar";
 import { logError } from "./log.js";
+const execFileAsync = promisify(execFile);
 async function extractArchive(archivePath, targetDirectoryPath) {
-    if (archivePath.endsWith('.zip')) return void await extract_zip(archivePath, {
-        dir: targetDirectoryPath
-    });
+    if (archivePath.endsWith('.zip')) {
+        const quotedArchivePath = `'${archivePath.replaceAll("'", "''")}'`;
+        const quotedTargetDirectoryPath = `'${targetDirectoryPath.replaceAll("'", "''")}'`;
+        await execFileAsync('powershell.exe', [
+            '-NoProfile',
+            '-Command',
+            `Expand-Archive -LiteralPath ${quotedArchivePath} -DestinationPath ${quotedTargetDirectoryPath} -Force`
+        ]);
+        return;
+    }
     if (archivePath.endsWith('.tar.gz')) return void await extract({
         cwd: targetDirectoryPath,
         file: archivePath

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@b12k/gitleaks",
-  "version": "8.30.1-v.2",
+  "version": "8.30.1-v.4",
   "description": "The missing NPM wrapper for Gitleaks",
   "keywords": [
     "api-keys",

package/scripts/postinstall.js

@@ -1,6 +1,7 @@
 import path from 'node:path';
+import { pathToFileURL } from 'node:url';
 
 const directory = import.meta.dirname;
 // eslint-disable-next-line n/no-process-exit
 if (!directory.includes('node_modules')) process.exit(0);
-await import(path.join(directory, '../dist/postinstall.js'));
+await import(pathToFileURL(path.join(directory, '../dist/postinstall.js')));