@gkiely/safe-install 0.1.0 → 0.1.2

package/README.md

@@ -44,7 +44,7 @@ npm i --ignore-scripts -D safe-install
 4. Find dependencies that declare install-time scripts:
 
 ```sh
-npm run safe-install -- find
+npm run safe-install -- review-deps
 ```
 
 5. Review the output, then add trusted packages to `package.json`. You can also

package/dist/index.d.ts

@@ -20,7 +20,7 @@ type SafeInstallConfig = {
 };
 export declare function getSafeInstallConfig(pkg: PackageJson): SafeInstallConfig;
 export declare function assertNoBlockedExoticSubdeps(config: SafeInstallConfig, packageLock: PackageLock): void;
-export declare function findCommand(): void;
+export declare function reviewDepsCommand(): void;
 export declare function installCommand(): void;
 export declare function main(args?: string[]): void;
 export {};

package/dist/index.js

@@ -38,7 +38,7 @@ export function findInstallScriptDependencies(packageLock, trustedDependencies =
     const trusted = new Set(trustedDependencies);
     const found = new Set();
     for (const [path, pkg] of Object.entries(packageLock.packages ?? {})) {
-        if (pkg.link) {
+        if (path === "" || pkg.link) {
             continue;
         }
         const name = pkg.name ?? packageNameFromPath(path);
@@ -120,10 +120,11 @@ function printHelp() {
 
 Usage:
   safe-install          Run npm install with scripts disabled, then rebuild trusted dependencies
-  safe-install find     List dependencies that declare install-time scripts
+  safe-install review-deps
+                        List dependencies that declare install-time scripts
 `);
 }
-export function findCommand() {
+export function reviewDepsCommand() {
     const dependencies = findInstallScriptDependencies(readPackageLock(), getTrustedDependencies(readPackageJson()));
     if (dependencies.length === 0) {
         console.log("No untrusted dependencies with install-time scripts found.");
@@ -154,8 +155,8 @@ export function main(args = process.argv.slice(2)) {
         installCommand();
         return;
     }
-    if (command === "find") {
-        findCommand();
+    if (command === "review-deps") {
+        reviewDepsCommand();
         return;
     }
     if (command === "--help" || command === "-h") {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gkiely/safe-install",
-  "version": "0.1.0",
+  "version": "0.1.2",
   "description": "Run npm installs with lifecycle scripts disabled, then rebuild explicitly trusted dependencies.",
   "author": "Grant Kiely <grant@youneedawiki.com>",
   "license": "MIT",
@@ -45,6 +45,7 @@
     "build": "tsc -p tsconfig.build.json",
     "prepack": "npm run build",
     "prepublishOnly": "npm run typecheck && npm test",
+    "safe-install": "node dist/index.js",
     "test": "node --test",
     "typecheck": "tsc --noEmit"
   },