@theoptimalpartner/npm-security-kit 1.0.0 → 1.0.1

package/bin/install.sh

@@ -108,28 +108,17 @@ echo ""
 # Copy security files
 echo "Installing security files..."
 
+# Template directory
+TEMPLATE_DIR="$SCRIPT_DIR/../template"
+
 # 1. Blacklist
-if [ -f "$SCRIPT_DIR/template/.security/malicious-packages-blacklist.json" ]; then
-    cp "$SCRIPT_DIR/template/.security/malicious-packages-blacklist.json" .security/
+if [ -f "$TEMPLATE_DIR/.security/malicious-packages-blacklist.json" ]; then
+    cp "$TEMPLATE_DIR/.security/malicious-packages-blacklist.json" .security/
     echo -e "${GREEN}  ✓ Blacklist installed${NC}"
 else
-    # Fallback: copy from auth-service if available
-    if [ -f "$SCRIPT_DIR/../auth-service/.security/malicious-packages-blacklist.json" ]; then
-        cp "$SCRIPT_DIR/../auth-service/.security/malicious-packages-blacklist.json" .security/
-        echo -e "${GREEN}  ✓ Blacklist installed (from auth-service)${NC}"
-    else
-        echo -e "${YELLOW}  ⚠ Blacklist not found, creating empty template${NC}"
-        cat > .security/malicious-packages-blacklist.json <<'EOF'
-{
-  "lastUpdated": "2025-10-20",
-  "source": "Socket.dev",
-  "blacklistedPackages": [],
-  "patterns": [],
-  "maliciousDomains": [],
-  "suspiciousNpmAccounts": []
-}
-EOF
-    fi
+    echo -e "${RED}  ✗ Error: Blacklist template not found${NC}"
+    echo -e "${YELLOW}  Expected: $TEMPLATE_DIR/.security/malicious-packages-blacklist.json${NC}"
+    exit 1
 fi
 
 # 2. Config
@@ -157,35 +146,40 @@ else
 fi
 
 # 3. Scripts
-if [ -f "$SCRIPT_DIR/template/scripts/check-malicious-packages.sh" ]; then
-    cp "$SCRIPT_DIR/template/scripts/check-malicious-packages.sh" scripts/
+if [ -f "$TEMPLATE_DIR/scripts/check-malicious-packages.sh" ]; then
+    cp "$TEMPLATE_DIR/scripts/check-malicious-packages.sh" scripts/
+    chmod +x scripts/check-malicious-packages.sh
 else
-    cp "$SCRIPT_DIR/../auth-service/scripts/check-malicious-packages.sh" scripts/
+    echo -e "${RED}  ✗ Error: check-malicious-packages.sh not found${NC}"
+    exit 1
 fi
 
-if [ -f "$SCRIPT_DIR/template/scripts/security-check.sh" ]; then
-    cp "$SCRIPT_DIR/template/scripts/security-check.sh" scripts/
+if [ -f "$TEMPLATE_DIR/scripts/security-check.sh" ]; then
+    cp "$TEMPLATE_DIR/scripts/security-check.sh" scripts/
+    chmod +x scripts/security-check.sh
 else
-    cp "$SCRIPT_DIR/../auth-service/scripts/security-check.sh" scripts/
+    echo -e "${RED}  ✗ Error: security-check.sh not found${NC}"
+    exit 1
 fi
 
-chmod +x scripts/*.sh
 echo -e "${GREEN}  ✓ Scripts installed${NC}"
 
 # 4. GitHub Actions
-if [ -f "$SCRIPT_DIR/template/.github/workflows/security-audit.yml" ]; then
-    cp "$SCRIPT_DIR/template/.github/workflows/security-audit.yml" .github/workflows/
+if [ -f "$TEMPLATE_DIR/.github/workflows/security-audit.yml" ]; then
+    cp "$TEMPLATE_DIR/.github/workflows/security-audit.yml" .github/workflows/
 else
-    cp "$SCRIPT_DIR/../auth-service/.github/workflows/security-audit.yml" .github/workflows/
+    echo -e "${RED}  ✗ Error: security-audit.yml not found${NC}"
+    exit 1
 fi
 
 echo -e "${GREEN}  ✓ GitHub Actions workflow installed${NC}"
 
 # 5. Dependabot
-if [ -f "$SCRIPT_DIR/template/.github/dependabot.yml" ]; then
-    cp "$SCRIPT_DIR/template/.github/dependabot.yml" .github/
+if [ -f "$TEMPLATE_DIR/.github/dependabot.yml" ]; then
+    cp "$TEMPLATE_DIR/.github/dependabot.yml" .github/
 else
-    cp "$SCRIPT_DIR/../auth-service/.github/dependabot.yml" .github/
+    echo -e "${RED}  ✗ Error: dependabot.yml not found${NC}"
+    exit 1
 fi
 
 echo -e "${GREEN}  ✓ Dependabot config installed${NC}"

package/package.json

@@ -1,11 +1,11 @@
 {
   "name": "@theoptimalpartner/npm-security-kit",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "description": "Portable security kit to protect Node.js/npm projects against malicious packages and vulnerabilities",
   "main": "src/index.js",
   "bin": {
-    "npm-security-install": "./bin/install.js",
-    "npm-security-check": "./bin/check.js"
+    "npm-security-install": "bin/install.js",
+    "npm-security-check": "bin/check.js"
   },
   "scripts": {
     "test": "echo \"No tests specified - package verified with npm pack\"",
@@ -28,7 +28,7 @@
   "license": "MIT",
   "repository": {
     "type": "git",
-    "url": "https://bitbucket.org/RoutingUC/npm-security-kit.git"
+    "url": "git+https://bitbucket.org/RoutingUC/npm-security-kit.git"
   },
   "engines": {
     "node": ">=14.0.0",