@methodwhite/auto-hardening 1.7.2 → 1.7.3

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 1.7.3 - 2026-08-02
+
+- Eliminada la dependencia runtime `chalk`.
+- Reducida la superficie de cadena de suministro a cero dependencias de producción.
+- Sustituidos los colores del CLI por ANSI nativo.
+
 ## 1.7.2 - 2026-08-02
 
 - Añadido workflow de publicación npm mediante Trusted Publishing/OIDC.

package/auto-hardening.js

@@ -5,9 +5,12 @@ import path from 'node:path';
 import process from 'node:process';
 import { execFileSync } from 'node:child_process';
 import { randomUUID, createHash } from 'node:crypto';
-import chalk from 'chalk';
+const color = (code, text) => process.stdout.isTTY ? `\u001b[${code}m${text}\u001b[0m` : text;
+const red = (text) => color(31, text);
+const yellow = (text) => color(33, text);
+const green = (text) => color(32, text);
 
-const VERSION = '1.7.2';
+const VERSION = '1.7.3';
 const quarantineDir = process.env.PROGRAMDATA ? path.join(process.env.PROGRAMDATA, 'MethodWhite', 'auto-hardening', 'quarantine') : path.join(os.tmpdir(), 'methodwhite-auto-hardening', 'quarantine');
 const stateDir = process.env.PROGRAMDATA ? path.join(process.env.PROGRAMDATA, 'MethodWhite', 'auto-hardening') : path.join(os.tmpdir(), 'methodwhite-auto-hardening');
 const powershell = (script) => execFileSync('powershell.exe', ['-NoProfile', '-NonInteractive', '-ExecutionPolicy', 'Bypass', '-Command', script], { encoding: 'utf8', maxBuffer: 16 * 1024 * 1024, stdio: ['ignore', 'pipe', 'pipe'] }).trim();
@@ -182,8 +185,8 @@ function apply() {
     if (after.policies.some((p) => p.status !== true && p.id !== 'windows-update' && p.action !== 'audit-only')) throw new Error('La verificación posterior no fue satisfactoria.');
     return { changed: true, backupId: saved.id, policies: after.policies };
   } catch (error) {
-    console.error(chalk.red(`Aplicación incompleta: ${error.message}`));
-    console.error(chalk.yellow(`Backup disponible para rollback: ${saved.id}`));
+    console.error(red(`Aplicación incompleta: ${error.message}`));
+    console.error(yellow(`Backup disponible para rollback: ${saved.id}`));
     throw error;
   }
 }
@@ -207,7 +210,7 @@ function rollback(id) {
     if (defender.EnableNetworkProtection) settings.push(`-EnableNetworkProtection ${psLiteral(defender.EnableNetworkProtection)}`);
     if (settings.length) powershell(`Set-MpPreference ${settings.join(' ')}`);
   }
-  console.log(chalk.green(`Rollback aplicado: ${id}`));
+  console.log(green(`Rollback aplicado: ${id}`));
 }
 
 
@@ -306,4 +309,4 @@ try {
   if (flags.has('--plan')) console.log(JSON.stringify(plan(report), null, 2));
   else if (flags.has('--status') || flags.has('--audit') || flags.size === 0) console.log(flags.has('--json') ? JSON.stringify(report, null, 2) : JSON.stringify(report, null, 2));
   if (flags.has('--apply')) console.log(JSON.stringify(apply(), null, 2));
-} catch (error) { console.error(chalk.red(`Error: ${error.message}`)); process.exitCode = 1; }
+} catch (error) { console.error(red(`Error: ${error.message}`)); process.exitCode = 1; }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@methodwhite/auto-hardening",
-  "version": "1.7.2",
+  "version": "1.7.3",
   "description": "Audita y aplica medidas de hardening defensivo en Windows con modo dry-run seguro.",
   "type": "module",
   "main": "auto-hardening.js",
@@ -47,8 +47,5 @@
   ],
   "publishConfig": {
     "access": "public"
-  },
-  "dependencies": {
-    "chalk": "^5.3.0"
   }
 }