@oclif/plugin-version 2.2.56 → 2.2.57

package/README.md

@@ -27,7 +27,7 @@ FLAG DESCRIPTIONS
     Additionally shows the architecture, node version, operating system, and versions of plugins that the CLI is using.
 ```
 
-_See code: [src/commands/version.ts](https://github.com/oclif/plugin-version/blob/2.2.56/src/commands/version.ts)_
+_See code: [src/commands/version.ts](https://github.com/oclif/plugin-version/blob/2.2.57/src/commands/version.ts)_
 <!-- commandsstop -->
 
 # Contributing

package/lib/commands/version.js

@@ -2,21 +2,30 @@ import { Command, Flags } from '@oclif/core';
 import { Ansis } from 'ansis';
 import { execFile } from 'node:child_process';
 import { EOL } from 'node:os';
+import { dirname, resolve } from 'node:path';
+import which from 'which';
 const ansis = new Ansis();
 async function getNpmDetails(pkg) {
-    return new Promise((resolve) => {
-        // Use execFile instead of exec to avoid shell interpretation.
-        // exec invokes cmd.exe on Windows, which resolves commands from CWD before PATH.
-        execFile('npm', ['view', pkg, '--json'], (error, stdout) => {
+    return new Promise((resolve_) => {
+        // Resolve npm from PATH only, excluding CWD. On Windows, both execFile (CreateProcess)
+        // and the `which` module resolve executables from CWD before PATH.
+        const cwd = resolve(process.cwd());
+        const npmPath = which.sync('npm', { nothrow: true });
+        if (!npmPath || dirname(resolve(npmPath)) === cwd) {
+            resolve_(false);
+            return;
+        }
+        const useShell = /\.(cmd|bat)$/i.test(npmPath);
+        execFile(npmPath, ['view', pkg, '--json'], { shell: useShell }, (error, stdout) => {
             if (error) {
-                resolve(false);
+                resolve_(false);
             }
             else {
                 try {
-                    resolve(JSON.parse(stdout));
+                    resolve_(JSON.parse(stdout));
                 }
                 catch {
-                    resolve(false);
+                    resolve_(false);
                 }
             }
         });

package/oclif.manifest.json

@@ -35,5 +35,5 @@
       ]
     }
   },
-  "version": "2.2.56"
+  "version": "2.2.57"
 }

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "@oclif/plugin-version",
   "description": "A command that shows the CLI version",
-  "version": "2.2.56",
+  "version": "2.2.57",
   "author": "Salesforce",
   "bugs": "https://github.com/oclif/plugin-version/issues",
   "dependencies": {
     "@oclif/core": "^4",
-    "ansis": "^3.17.0"
+    "ansis": "^3.17.0",
+    "which": "^4"
   },
   "devDependencies": {
     "@commitlint/config-conventional": "^19",
@@ -17,6 +18,7 @@
     "@types/chai": "^4.3.17",
     "@types/mocha": "^10",
     "@types/node": "^18",
+    "@types/which": "^3",
     "chai": "^4.5.0",
     "commitlint": "^19",
     "eslint": "^9.39.5",