@quickdapp/cli 3.7.0 → 3.9.0

package/README.md

@@ -6,22 +6,27 @@ CLI tool to scaffold new QuickDapp projects.
 
 ```bash
 # Using bunx (recommended)
-bunx create-quickdapp my-project
+bunx @quickdapp/cli create my-project
 
 # Using npx
-npx create-quickdapp my-project
+npx @quickdapp/cli create my-project
+
+# The 'create' command is the default, so this also works:
+bunx @quickdapp/cli my-project
 
 # With variant selection
-bunx create-quickdapp my-project --variant base   # Base package (no Web3)
-bunx create-quickdapp my-project --variant web3   # Web3 variant (default)
+bunx @quickdapp/cli create my-project --variant web3   # Web3 variant
+bunx @quickdapp/cli create my-project --variant base   # Base (default)
 ```
 
 ## Options
 
 | Option | Description |
 |--------|-------------|
-| `--variant <name>` | Choose package variant: `base` or `web3` (default: `web3`) |
+| `-v, --variant <name>` | Choose package variant: `base` or `web3` (default: `base`) |
 | `--skip-install` | Skip running `bun install` after scaffolding |
+| `-r, --release <version>` | Use a specific release version |
+| `--list-versions` | List available QuickDapp versions |
 | `--help` | Show help |
 
 ## Prerequisites

package/dist/index.js

@@ -6866,11 +6866,12 @@ class Unpack extends Parser {
   }
   [STRIPABSOLUTEPATH](entry, field) {
     const p = entry[field];
+    const { type } = entry;
     if (!p || this.preservePaths)
       return true;
     const parts = p.split("/");
     if (parts.includes("..") || isWindows3 && /^[a-z]:\.\.$/i.test(parts[0] ?? "")) {
-      if (field === "path") {
+      if (field === "path" || type === "Link") {
         this.warn("TAR_ENTRY_ERROR", `${field} contains '..'`, {
           entry,
           [field]: p
@@ -7654,9 +7655,12 @@ function getGithubDownloadBase() {
 function getSampleContractsUrl() {
   return process.env.QUICKDAPP_SAMPLE_CONTRACTS_URL ?? "https://github.com/QuickDapp/sample-contracts.git";
 }
+async function fetchWithTimeout(url, timeoutMs) {
+  return fetch(url, { signal: AbortSignal.timeout(timeoutMs) });
+}
 function checkCommand(command, displayName) {
   try {
-    execSync(`which ${command}`, { stdio: "ignore" });
+    execSync(`which ${command}`, { stdio: "ignore", timeout: 5000 });
     return true;
   } catch {
     console.error(`Error: ${displayName} is not installed.`);
@@ -7670,7 +7674,7 @@ function checkPrerequisites() {
   return hasGit && hasBun;
 }
 async function getLatestRelease() {
-  const response = await fetch(`${getGithubApiBase()}/repos/${GITHUB_REPO}/releases/latest`);
+  const response = await fetchWithTimeout(`${getGithubApiBase()}/repos/${GITHUB_REPO}/releases/latest`, 1e4);
   if (!response.ok) {
     throw new Error(`Failed to fetch latest release: ${response.statusText}`);
   }
@@ -7678,7 +7682,7 @@ async function getLatestRelease() {
   return data.tag_name;
 }
 async function listReleases() {
-  const response = await fetch(`${getGithubApiBase()}/repos/${GITHUB_REPO}/releases`);
+  const response = await fetchWithTimeout(`${getGithubApiBase()}/repos/${GITHUB_REPO}/releases`, 1e4);
   if (!response.ok) {
     throw new Error(`Failed to fetch releases: ${response.statusText}`);
   }
@@ -7689,7 +7693,7 @@ async function downloadAndExtract(variant, version, targetDir) {
   const assetName = `${packageName}-${version}.tar.gz`;
   const downloadUrl = `${getGithubDownloadBase()}/${GITHUB_REPO}/releases/download/${version}/${assetName}`;
   console.log(`Downloading ${assetName}...`);
-  const response = await fetch(downloadUrl);
+  const response = await fetchWithTimeout(downloadUrl, 60000);
   if (!response.ok) {
     throw new Error(`Failed to download: ${response.statusText}`);
   }
@@ -7729,14 +7733,16 @@ async function cloneSampleContracts(targetDir) {
 Cloning sample-contracts...`);
   const cloneResult = spawnSync("git", ["clone", getSampleContractsUrl(), "sample-contracts"], {
     cwd: targetDir,
-    stdio: "inherit"
+    stdio: "inherit",
+    timeout: 120000
   });
   if (cloneResult.status !== 0) {
     throw new Error(`git clone failed with code ${cloneResult.status}`);
   }
   const submoduleResult = spawnSync("git", ["submodule", "update", "--init", "--recursive"], {
     cwd: join2(targetDir, "sample-contracts"),
-    stdio: "inherit"
+    stdio: "inherit",
+    timeout: 120000
   });
   if (submoduleResult.status !== 0) {
     throw new Error(`git submodule update failed with code ${submoduleResult.status}`);
@@ -7745,11 +7751,12 @@ Cloning sample-contracts...`);
 async function initGit(targetDir) {
   console.log(`
 Initializing git repository...`);
-  execSync("git init", { cwd: targetDir, stdio: "inherit" });
-  execSync("git add .", { cwd: targetDir, stdio: "inherit" });
+  execSync("git init", { cwd: targetDir, stdio: "inherit", timeout: 1e4 });
+  execSync("git add .", { cwd: targetDir, stdio: "inherit", timeout: 30000 });
   execSync('git commit -m "Initial commit from create-quickdapp"', {
     cwd: targetDir,
-    stdio: "inherit"
+    stdio: "inherit",
+    timeout: 30000
   });
 }
 async function createProject(projectName, options) {
@@ -7794,8 +7801,8 @@ Error:`, error instanceof Error ? error.message : String(error));
   }
 }
 var program2 = new Command;
-program2.name("create-quickdapp").description("Create a new QuickDapp project").version(CLI_VERSION);
-program2.argument("[project-name]", "Name of the project to create").option("-v, --variant <variant>", "Project variant (base or web3)", "web3").option("--skip-install", "Skip running bun install", false).option("-r, --release <version>", "Use a specific release version").option("--list-versions", "List available QuickDapp versions").action(async (projectName, options) => {
+program2.name("create-quickdapp").description("CLI to scaffold QuickDapp projects").version(CLI_VERSION);
+program2.command("create [project-name]", { isDefault: true }).description("Create a new QuickDapp project").option("-v, --variant <variant>", "Project variant (base or web3)", "base").option("--skip-install", "Skip running bun install", false).option("-r, --release <version>", "Use a specific release version").option("--list-versions", "List available QuickDapp versions").action(async (projectName, options) => {
   if (options.listVersions) {
     try {
       const releases = await listReleases();
@@ -7815,7 +7822,7 @@ program2.argument("[project-name]", "Name of the project to create").option("-v,
   }
   if (!projectName) {
     console.error("Error: project-name is required");
-    console.error("Usage: create-quickdapp <project-name>");
+    console.error("Usage: create-quickdapp create <project-name>");
     process.exit(1);
   }
   if (!checkPrerequisites()) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quickdapp/cli",
-  "version": "3.7.0",
+  "version": "3.9.0",
   "publishConfig": {
     "access": "public"
   },