@servicetitan/install 40.0.0 → 40.1.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist/index.d.ts CHANGED
@@ -1,4 +1,5 @@
1
1
  export { PackageManager, getPackageManager } from './package-manager';
2
2
  export type { DeclaredVersionQuery, ResolvedVersionQuery } from './package-manager';
3
- export { gitCloneRepo, gitIsReachable, isCI, npmWhoAmI, versionCompare } from './utils';
3
+ export { AUDITED_SCRIPTS, gitCloneRepo, gitIsReachable, isCI, npmWhoAmI, versionCompare, } from './utils';
4
+ export type { AuditedScript } from './utils';
4
5
  //# sourceMappingURL=index.d.ts.map
@@ -1 +1 @@
1
- {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtE,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,IAAI,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC"}
1
+ {"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtE,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AACpF,OAAO,EACH,eAAe,EACf,YAAY,EACZ,cAAc,EACd,IAAI,EACJ,SAAS,EACT,cAAc,GACjB,MAAM,SAAS,CAAC;AACjB,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC"}
package/dist/index.js CHANGED
@@ -9,6 +9,9 @@ function _export(target, all) {
9
9
  });
10
10
  }
11
11
  _export(exports, {
12
+ get AUDITED_SCRIPTS () {
13
+ return _utils.AUDITED_SCRIPTS;
14
+ },
12
15
  get PackageManager () {
13
16
  return _packagemanager.PackageManager;
14
17
  },
package/dist/index.js.map CHANGED
@@ -1 +1 @@
1
- {"version":3,"sources":["../src/index.ts"],"sourcesContent":["export { PackageManager, getPackageManager } from './package-manager';\nexport type { DeclaredVersionQuery, ResolvedVersionQuery } from './package-manager';\nexport { gitCloneRepo, gitIsReachable, isCI, npmWhoAmI, versionCompare } from './utils';\n"],"names":["PackageManager","getPackageManager","gitCloneRepo","gitIsReachable","isCI","npmWhoAmI","versionCompare"],"mappings":";;;;;;;;;;;QAASA;eAAAA,8BAAc;;QAAEC;eAAAA,iCAAiB;;QAEjCC;eAAAA,mBAAY;;QAAEC;eAAAA,qBAAc;;QAAEC;eAAAA,WAAI;;QAAEC;eAAAA,gBAAS;;QAAEC;eAAAA,qBAAc;;;gCAFpB;uBAE4B"}
1
+ {"version":3,"sources":["../src/index.ts"],"sourcesContent":["export { PackageManager, getPackageManager } from './package-manager';\nexport type { DeclaredVersionQuery, ResolvedVersionQuery } from './package-manager';\nexport {\n AUDITED_SCRIPTS,\n gitCloneRepo,\n gitIsReachable,\n isCI,\n npmWhoAmI,\n versionCompare,\n} from './utils';\nexport type { AuditedScript } from './utils';\n"],"names":["AUDITED_SCRIPTS","PackageManager","getPackageManager","gitCloneRepo","gitIsReachable","isCI","npmWhoAmI","versionCompare"],"mappings":";;;;;;;;;;;QAGIA;eAAAA,sBAAe;;QAHVC;eAAAA,8BAAc;;QAAEC;eAAAA,iCAAiB;;QAItCC;eAAAA,mBAAY;;QACZC;eAAAA,qBAAc;;QACdC;eAAAA,WAAI;;QACJC;eAAAA,gBAAS;;QACTC;eAAAA,qBAAc;;;gCARgC;uBAS3C"}
@@ -17,13 +17,13 @@ const AUDITED_SCRIPTS = [
17
17
  },
18
18
  {
19
19
  name: 'cypress',
20
- maximumVersion: '16.0.0',
20
+ maximumVersion: '16.1.1',
21
21
  note: "Downloads Cypress's platform-specific test runner binary"
22
22
  },
23
23
  {
24
24
  name: 'msw',
25
- maximumVersion: '2.15.0',
26
- note: "Regenerates the mock service worker script into the project's configured workerDirectory, no-op unless that's set"
25
+ maximumVersion: '3.0.1',
26
+ note: 'No install script at all since 3.0.0; worker regeneration moved to the manual `msw init` CLI command instead of running automatically on install. Ceiling bumped anyway to prevent audit workflow from flagging old version'
27
27
  },
28
28
  {
29
29
  name: 'nx',
@@ -1 +1 @@
1
- {"version":3,"sources":["../../src/utils/audited-scripts.ts"],"sourcesContent":["export interface AuditedScript {\n name: string;\n action: 'allow' | 'ignore';\n maximumVersion?: string;\n note?: string;\n}\n\nexport const AUDITED_SCRIPTS: AuditedScript[] = [\n // Trusted to run their install scripts, up to the audited version.\n ...[\n {\n name: '@servicetitan/startup',\n note: 'Applies patch-package patches to installed dependencies',\n },\n {\n name: 'cypress',\n maximumVersion: '16.0.0',\n note: \"Downloads Cypress's platform-specific test runner binary\",\n },\n {\n name: 'msw',\n maximumVersion: '2.15.0',\n note: \"Regenerates the mock service worker script into the project's configured workerDirectory, no-op unless that's set\",\n },\n {\n name: 'nx',\n maximumVersion: '23.2.1',\n note: 'Verifies native platform support and updates the Nx Cloud client if the workspace uses Nx Cloud',\n },\n {\n name: 'tree-sitter',\n maximumVersion: '0.25.1',\n note: 'Installs a prebuilt native binary via node-gyp-build, compiling from source as a fallback',\n },\n ].map((entry: Omit<AuditedScript, 'action'>) => ({ ...entry, action: 'allow' as const })),\n\n // Have install scripts, but don't need them to function correctly.\n ...[\n {\n name: '@parcel/watcher',\n note: 'Installs platform-specific binary via optionalDependencies, install script is a legacy fallback',\n },\n {\n name: '@progress/kendo-licensing',\n note: 'Validates Kendo UI license key, not needed for functionality',\n },\n {\n name: '@scarf/scarf',\n note: 'Sends anonymous analytics/telemetry to Scarf, usage-tracking mechanism with no functional purpose',\n },\n {\n name: '@swc/core',\n note: 'Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback',\n },\n {\n name: '@tree-sitter-grammars/tree-sitter-yaml',\n note: 'Ships prebuilds for all supported targets via node-gyp-build, install script is a source-compile fallback',\n },\n {\n name: '@vaadin/vaadin-usage-statistics',\n note: \"Toggles Vaadin's development-time telemetry, no effect on functionality\",\n },\n {\n name: 'contentful',\n note: 'In 9.3.x, printed a message announcing that v10 was available, no functional purpose; no install script at all since 9.4.0',\n },\n {\n name: 'core-js-pure',\n note: 'Prints a donation/sponsorship banner to the console, no functional purpose',\n },\n {\n name: 'core-js',\n note: 'Prints a donation/sponsorship banner to the console, no functional purpose',\n },\n {\n name: 'es5-ext',\n note: 'Displays politically motivated message targeted at Russian developers, no effect on functionality',\n },\n {\n name: 'esbuild',\n note: 'Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback',\n },\n {\n name: 'tree-sitter-json',\n note: 'Ships prebuilds for all supported targets via node-gyp-build, install script is a source-compile fallback',\n },\n {\n name: 'unrs-resolver',\n note: 'Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback',\n },\n ].map((entry: Omit<AuditedScript, 'action'>) => ({ ...entry, action: 'ignore' as const })),\n];\n"],"names":["AUDITED_SCRIPTS","name","note","maximumVersion","map","entry","action"],"mappings":";;;;+BAOaA;;;eAAAA;;;AAAN,MAAMA,kBAAmC;IAC5C,mEAAmE;OAChE;QACC;YACIC,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNE,gBAAgB;YAChBD,MAAM;QACV;QACA;YACID,MAAM;YACNE,gBAAgB;YAChBD,MAAM;QACV;QACA;YACID,MAAM;YACNE,gBAAgB;YAChBD,MAAM;QACV;QACA;YACID,MAAM;YACNE,gBAAgB;YAChBD,MAAM;QACV;KACH,CAACE,GAAG,CAAC,CAACC,QAA0C,CAAA;YAAE,GAAGA,KAAK;YAAEC,QAAQ;QAAiB,CAAA;IAEtF,mEAAmE;OAChE;QACC;YACIL,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;KACH,CAACE,GAAG,CAAC,CAACC,QAA0C,CAAA;YAAE,GAAGA,KAAK;YAAEC,QAAQ;QAAkB,CAAA;CAC1F"}
1
+ {"version":3,"sources":["../../src/utils/audited-scripts.ts"],"sourcesContent":["export interface AuditedScript {\n name: string;\n action: 'allow' | 'ignore';\n maximumVersion?: string;\n note?: string;\n}\n\nexport const AUDITED_SCRIPTS: AuditedScript[] = [\n // Trusted to run their install scripts, up to the audited version.\n ...[\n {\n name: '@servicetitan/startup',\n note: 'Applies patch-package patches to installed dependencies',\n },\n {\n name: 'cypress',\n maximumVersion: '16.1.1',\n note: \"Downloads Cypress's platform-specific test runner binary\",\n },\n {\n name: 'msw',\n maximumVersion: '3.0.1',\n note: 'No install script at all since 3.0.0; worker regeneration moved to the manual `msw init` CLI command instead of running automatically on install. Ceiling bumped anyway to prevent audit workflow from flagging old version',\n },\n {\n name: 'nx',\n maximumVersion: '23.2.1',\n note: 'Verifies native platform support and updates the Nx Cloud client if the workspace uses Nx Cloud',\n },\n {\n name: 'tree-sitter',\n maximumVersion: '0.25.1',\n note: 'Installs a prebuilt native binary via node-gyp-build, compiling from source as a fallback',\n },\n ].map((entry: Omit<AuditedScript, 'action'>) => ({ ...entry, action: 'allow' as const })),\n\n // Have install scripts, but don't need them to function correctly.\n ...[\n {\n name: '@parcel/watcher',\n note: 'Installs platform-specific binary via optionalDependencies, install script is a legacy fallback',\n },\n {\n name: '@progress/kendo-licensing',\n note: 'Validates Kendo UI license key, not needed for functionality',\n },\n {\n name: '@scarf/scarf',\n note: 'Sends anonymous analytics/telemetry to Scarf, usage-tracking mechanism with no functional purpose',\n },\n {\n name: '@swc/core',\n note: 'Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback',\n },\n {\n name: '@tree-sitter-grammars/tree-sitter-yaml',\n note: 'Ships prebuilds for all supported targets via node-gyp-build, install script is a source-compile fallback',\n },\n {\n name: '@vaadin/vaadin-usage-statistics',\n note: \"Toggles Vaadin's development-time telemetry, no effect on functionality\",\n },\n {\n name: 'contentful',\n note: 'In 9.3.x, printed a message announcing that v10 was available, no functional purpose; no install script at all since 9.4.0',\n },\n {\n name: 'core-js-pure',\n note: 'Prints a donation/sponsorship banner to the console, no functional purpose',\n },\n {\n name: 'core-js',\n note: 'Prints a donation/sponsorship banner to the console, no functional purpose',\n },\n {\n name: 'es5-ext',\n note: 'Displays politically motivated message targeted at Russian developers, no effect on functionality',\n },\n {\n name: 'esbuild',\n note: 'Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback',\n },\n {\n name: 'tree-sitter-json',\n note: 'Ships prebuilds for all supported targets via node-gyp-build, install script is a source-compile fallback',\n },\n {\n name: 'unrs-resolver',\n note: 'Installs platform-specific binary via optionalDependencies, postinstall is a legacy fallback',\n },\n ].map((entry: Omit<AuditedScript, 'action'>) => ({ ...entry, action: 'ignore' as const })),\n];\n"],"names":["AUDITED_SCRIPTS","name","note","maximumVersion","map","entry","action"],"mappings":";;;;+BAOaA;;;eAAAA;;;AAAN,MAAMA,kBAAmC;IAC5C,mEAAmE;OAChE;QACC;YACIC,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNE,gBAAgB;YAChBD,MAAM;QACV;QACA;YACID,MAAM;YACNE,gBAAgB;YAChBD,MAAM;QACV;QACA;YACID,MAAM;YACNE,gBAAgB;YAChBD,MAAM;QACV;QACA;YACID,MAAM;YACNE,gBAAgB;YAChBD,MAAM;QACV;KACH,CAACE,GAAG,CAAC,CAACC,QAA0C,CAAA;YAAE,GAAGA,KAAK;YAAEC,QAAQ;QAAiB,CAAA;IAEtF,mEAAmE;OAChE;QACC;YACIL,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;QACA;YACID,MAAM;YACNC,MAAM;QACV;KACH,CAACE,GAAG,CAAC,CAACC,QAA0C,CAAA;YAAE,GAAGA,KAAK;YAAEC,QAAQ;QAAkB,CAAA;CAC1F"}
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@servicetitan/install",
3
- "version": "40.0.0",
3
+ "version": "40.1.0",
4
4
  "description": "Lightweight wrapper around npm install that configures access to private packages",
5
5
  "homepage": "https://docs.st.dev/docs/frontend/uikit/install",
6
6
  "repository": {
package/src/index.ts CHANGED
@@ -1,3 +1,11 @@
1
1
  export { PackageManager, getPackageManager } from './package-manager';
2
2
  export type { DeclaredVersionQuery, ResolvedVersionQuery } from './package-manager';
3
- export { gitCloneRepo, gitIsReachable, isCI, npmWhoAmI, versionCompare } from './utils';
3
+ export {
4
+ AUDITED_SCRIPTS,
5
+ gitCloneRepo,
6
+ gitIsReachable,
7
+ isCI,
8
+ npmWhoAmI,
9
+ versionCompare,
10
+ } from './utils';
11
+ export type { AuditedScript } from './utils';
@@ -14,13 +14,13 @@ export const AUDITED_SCRIPTS: AuditedScript[] = [
14
14
  },
15
15
  {
16
16
  name: 'cypress',
17
- maximumVersion: '16.0.0',
17
+ maximumVersion: '16.1.1',
18
18
  note: "Downloads Cypress's platform-specific test runner binary",
19
19
  },
20
20
  {
21
21
  name: 'msw',
22
- maximumVersion: '2.15.0',
23
- note: "Regenerates the mock service worker script into the project's configured workerDirectory, no-op unless that's set",
22
+ maximumVersion: '3.0.1',
23
+ note: 'No install script at all since 3.0.0; worker regeneration moved to the manual `msw init` CLI command instead of running automatically on install. Ceiling bumped anyway to prevent audit workflow from flagging old version',
24
24
  },
25
25
  {
26
26
  name: 'nx',