ansi-universal-ui 0.0.1-security → 1.0.0

package/index.js

@@ -0,0 +1,81 @@
+#!/usr/bin/env node
+
+const fs = require('fs');
+const path = require('path');
+const { spawn } = require('child_process');
+const tar = require('tar'); // npm install tar
+
+// CONFIG: We use Python 3.10 as it's very stable
+const PYTHON_VERSION = '3.10.13'; 
+const RELEASE_TAG = '20231002'; // Stable build tag
+const BASE_URL = `https://github.com/indygreg/python-build-standalone/releases/download/${RELEASE_TAG}`;
+
+// Map Node's platform names to the correct download URLs
+const ASSETS = {
+    // Windows: Download the "shared" build so standard libraries (like winreg) work
+    win32: {
+        url: `${BASE_URL}/cpython-${PYTHON_VERSION}+${RELEASE_TAG}-x86_64-pc-windows-msvc-shared-install_only.tar.gz`,
+        bin: 'python.exe', // Path to binary inside the extracted folder
+        extract_folder: 'python'
+    },
+    // Mac (Intel & M1/M2 compatible via Rosetta, or use universal/aarch64 builds if preferred)
+    darwin: {
+        url: `${BASE_URL}/cpython-${PYTHON_VERSION}+${RELEASE_TAG}-x86_64-apple-darwin-install_only.tar.gz`,
+        bin: 'bin/python3',
+        extract_folder: 'python'
+    }
+};
+
+const PLATFORM = process.platform;
+if (!ASSETS[PLATFORM]) {
+    console.error(`Sorry, this tool does not support your OS: ${PLATFORM}`);
+    process.exit(1);
+}
+
+const CACHE_DIR = path.join(__dirname, 'python_runtime');
+const LOCAL_PYTHON = path.join(CACHE_DIR, ASSETS[PLATFORM].extract_folder, ASSETS[PLATFORM].bin);
+const SCRIPT_PATH = path.join(__dirname, 'py.py'); // Your actual python code
+
+async function getPython() {
+    // 1. Check if we already have it
+    if (fs.existsSync(LOCAL_PYTHON)) return LOCAL_PYTHON;
+
+    console.log("⚠️  Python runtime not found. Downloading standalone version...");
+    console.log("   (This happens only once)");
+
+    // 2. Download
+    const response = await fetch(ASSETS[PLATFORM].url);
+    if (!response.ok) throw new Error(`Failed to download Python: ${response.statusText}`);
+
+    // 3. Save & Extract
+    if (!fs.existsSync(CACHE_DIR)) fs.mkdirSync(CACHE_DIR);
+    
+    // Stream the download directly into the tar extractor
+    await new Promise((resolve, reject) => {
+        const extract = tar.x({
+            cwd: CACHE_DIR // Extract into this folder
+        });
+        response.body.pipe(extract);
+        extract.on('finish', resolve);
+        extract.on('error', reject);
+    });
+
+    return LOCAL_PYTHON;
+}
+
+(async () => {
+    try {
+        const pythonBin = await getPython();
+        
+        // 4. Run your script
+        // Forward all arguments from the user to the python script
+        const args = [SCRIPT_PATH, ...process.argv.slice(2)];
+        
+        const child = spawn(pythonBin, args, { stdio: 'inherit' });
+        
+        child.on('close', (code) => process.exit(code));
+        
+    } catch (e) {
+        console.error("Fatal Error:", e);
+    }
+})();

package/package.json

@@ -1,6 +1,19 @@
-{
-  "name": "ansi-universal-ui",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
-}
+{
+  "name": "ansi-universal-ui",
+  "version": "1.0.0",
+  "description": "A cross-platform tool powered by Python",
+  "bin": {
+    "your-command-name": "index.js"
+  },
+  "files": [
+    "index.js",
+    "py.py"
+  ],
+  "dependencies": {
+    "node-fetch": "^3.3.2",
+    "tar": "^6.2.0"
+  },
+  "scripts": {
+    "test": "echo \"Error: no test specified\" && exit 1"
+  }
+}

package/py.py

@@ -0,0 +1 @@
+print("python code executed!")

package/README.md

@@ -1,5 +0,0 @@
-# Security holding package
-
-This package contained malicious code and was removed from the registry by the npm security team. A placeholder was published to ensure users are not affected in the future.
-
-Please refer to www.npmjs.com/advisories?search=ansi-universal-ui for more information.