@ossiq/cli 0.1.12

package/README.md

@@ -0,0 +1,48 @@
+# @ossiq/cli
+
+Make better dependency decisions — before and after installation.
+
+[OSS IQ](https://github.com/ossiq/ossiq) analyses your `package.json`, `pyproject.toml`
+or `requirements.txt` and answers: should I add it, update it, or refactor it out?
+
+## Usage
+
+No install required:
+
+```bash
+npx @ossiq/cli status
+```
+
+Or install it:
+
+```bash
+npm install -g @ossiq/cli
+ossiq status
+```
+
+This package ships a self-contained binary — **no Python installation is required**.
+The correct binary for your platform is selected automatically through npm's
+optional dependencies.
+
+## Supported platforms
+
+| OS | Architecture |
+| --- | --- |
+| macOS | arm64, x64 |
+| Linux (glibc) | arm64, x64 |
+| Windows | x64 |
+
+musl-based Linux (Alpine) and Windows on ARM are not covered by the prebuilt
+binaries. On those platforms install from PyPI instead:
+
+```bash
+uv tool install ossiq      # or: pipx install ossiq
+```
+
+## Documentation
+
+<https://ossiq.dev>
+
+## License
+
+AGPL-3.0-only

package/bin/ossiq.js

@@ -0,0 +1,86 @@
+#!/usr/bin/env node
+"use strict";
+
+// Thin launcher for the platform-specific `ossiq` binary.
+//
+// The real executables ship in optional, platform-gated packages (the model used
+// by esbuild and friends), so npm installs exactly one of them for the current
+// host. There is deliberately no postinstall script: nothing here needs to run at
+// install time, so `npm ci --ignore-scripts` and pnpm's default settings work.
+
+const { spawnSync } = require("child_process");
+const path = require("path");
+
+const PLATFORM_PACKAGES = {
+  "darwin arm64": "@ossiq/cli-darwin-arm64",
+  "darwin x64": "@ossiq/cli-darwin-x64",
+  "linux arm64": "@ossiq/cli-linux-arm64",
+  "linux x64": "@ossiq/cli-linux-x64",
+  "win32 x64": "@ossiq/cli-win32-x64",
+};
+
+const FALLBACK_HINT = [
+  "",
+  "OSS IQ is also published to PyPI and can be installed without Node:",
+  "",
+  "    uv tool install ossiq      # or: pipx install ossiq",
+  "    ossiq status",
+  "",
+  "See https://github.com/ossiq/ossiq for details.",
+].join("\n");
+
+function resolveBinary() {
+  const key = `${process.platform} ${process.arch}`;
+  const packageName = PLATFORM_PACKAGES[key];
+
+  if (!packageName) {
+    return {
+      error:
+        `ossiq does not ship a prebuilt binary for ${key}.` +
+        `\nSupported: ${Object.keys(PLATFORM_PACKAGES).join(", ")}.`,
+    };
+  }
+
+  let packageJsonPath;
+  try {
+    packageJsonPath = require.resolve(`${packageName}/package.json`);
+  } catch (err) {
+    return {
+      error:
+        `The platform package ${packageName} is not installed.` +
+        "\n\nThis usually means npm skipped optional dependencies (--no-optional / --omit=optional)," +
+        "\nor the platform is unsupported (musl-based Linux such as Alpine is not covered by the" +
+        "\nprebuilt binaries, which are linked against glibc).",
+    };
+  }
+
+  const executable = process.platform === "win32" ? "ossiq.exe" : "ossiq";
+  return { binary: path.join(path.dirname(packageJsonPath), "bin", "ossiq", executable) };
+}
+
+function main() {
+  const { binary, error } = resolveBinary();
+
+  if (error) {
+    process.stderr.write(`${error}\n${FALLBACK_HINT}\n`);
+    process.exit(1);
+  }
+
+  const result = spawnSync(binary, process.argv.slice(2), { stdio: "inherit" });
+
+  if (result.error) {
+    process.stderr.write(`Failed to run ${binary}: ${result.error.message}\n${FALLBACK_HINT}\n`);
+    process.exit(1);
+  }
+
+  // Propagate a fatal signal as the conventional 128+n exit code so callers and
+  // CI see the real cause instead of a bare success.
+  if (result.signal) {
+    process.stderr.write(`ossiq terminated by signal ${result.signal}\n`);
+    process.exit(1);
+  }
+
+  process.exit(result.status === null ? 1 : result.status);
+}
+
+main();

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@ossiq/cli",
+  "version": "0.1.12",
+  "description": "Make better dependency decisions - before and after installation.",
+  "license": "AGPL-3.0-only",
+  "homepage": "https://ossiq.dev",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ossiq/ossiq.git"
+  },
+  "bugs": {
+    "url": "https://github.com/ossiq/ossiq/issues"
+  },
+  "keywords": [
+    "dependencies",
+    "security",
+    "cve",
+    "supply-chain",
+    "npm",
+    "pypi"
+  ],
+  "bin": {
+    "ossiq": "bin/ossiq.js"
+  },
+  "files": [
+    "bin",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=18"
+  },
+  "optionalDependencies": {
+    "@ossiq/cli-darwin-arm64": "0.1.12",
+    "@ossiq/cli-darwin-x64": "0.1.12",
+    "@ossiq/cli-linux-arm64": "0.1.12",
+    "@ossiq/cli-linux-x64": "0.1.12",
+    "@ossiq/cli-win32-x64": "0.1.12"
+  }
+}