create-node-lib 2.17.0 → 2.17.2

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [2.17.2](https://github.com/lirantal/create-node-lib/compare/v2.17.1...v2.17.2) (2026-05-03)
+
+
+### Bug Fixes
+
+* add Snyk CLI installation to post-create script ([5a40220](https://github.com/lirantal/create-node-lib/commit/5a40220e07daad422eac8a0666eb28602caa1043))
+
+## [2.17.1](https://github.com/lirantal/create-node-lib/compare/v2.17.0...v2.17.1) (2026-05-03)
+
+
+### Bug Fixes
+
+* add initialization script for development environment ([40cfb83](https://github.com/lirantal/create-node-lib/commit/40cfb8357638c5d78f88359663f7a785118ad7d9))
+
 # [2.17.0](https://github.com/lirantal/create-node-lib/compare/v2.16.7...v2.17.0) (2026-05-03)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-node-lib",
-  "version": "2.17.0",
+  "version": "2.17.2",
   "description": "Scaffolding out a Node.js library module",
   "bin": "./bin/cli.js",
   "engines": {

package/template/.devcontainer/initialize.sh

@@ -0,0 +1,54 @@
+#!/usr/bin/env bash
+# initialize: runs on host before container create/start (initializeCommand).
+# Prepares .env.development and, when possible, injects OP_SERVICE_ACCOUNT_TOKEN from 1Password.
+
+set -euo pipefail
+
+WORKSPACE_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+ENV_FILE="${WORKSPACE_DIR}/.env.development"
+OP_TOKEN_REFERENCE="op://Private/1Password op CLI Service Account for DevContainers/password"
+
+main() {
+  ensure_env_file_exists
+  maybe_inject_1password_service_account_token
+}
+
+ensure_env_file_exists() {
+  if [[ ! -f "${ENV_FILE}" ]]; then
+    : > "${ENV_FILE}"
+  fi
+}
+
+maybe_inject_1password_service_account_token() {
+  local token
+
+  if ! command -v op >/dev/null 2>&1; then
+    echo "initialize.sh: op CLI not found; leaving ${ENV_FILE} unchanged."
+    return 0
+  fi
+
+  if ! token="$(op read "${OP_TOKEN_REFERENCE}" 2>/dev/null)"; then
+    echo "initialize.sh: could not read OP service token from 1Password; leaving ${ENV_FILE} unchanged."
+    return 0
+  fi
+
+  if [[ -z "${token}" ]]; then
+    echo "initialize.sh: OP service token is empty; leaving ${ENV_FILE} unchanged."
+    return 0
+  fi
+
+  upsert_env_var "OP_SERVICE_ACCOUNT_TOKEN" "${token}"
+}
+
+upsert_env_var() {
+  local key="$1"
+  local value="$2"
+  local tmp_file
+
+  tmp_file="$(mktemp)"
+  awk -F= -v k="${key}" '$1 != k' "${ENV_FILE}" > "${tmp_file}"
+  printf '%s=%s\n' "${key}" "${value}" >> "${tmp_file}"
+  mv "${tmp_file}" "${ENV_FILE}"
+}
+
+main "$@"

package/template/.devcontainer/post-create.sh

@@ -8,6 +8,7 @@ main() {
   install_apm
   # install_opencode_cli
   install_1password_cli
+  install_snyk_cli
   run_deps_install
 }
 
@@ -28,9 +29,21 @@ install_opencode_cli() {
   curl -fsSL https://opencode.ai/install | bash
 }
 
-# Optional: Snyk CLI
-#   curl --compressed https://static.snyk.io/cli/latest/snyk-linux-arm64 -o snyk
-#   chmod +x ./snyk && sudo mv -f ./snyk /usr/local/bin/snyk
+install_snyk_cli() {
+  # https://docs.snyk.io/snyk-cli/install-the-snyk-cli
+  local url
+  case "$(uname -m)" in
+    aarch64 | arm64) url="https://static.snyk.io/cli/latest/snyk-linux-arm64" ;;
+    x86_64 | amd64) url="https://static.snyk.io/cli/latest/snyk-linux" ;;
+    *)
+      echo "post-create: skipping Snyk CLI (unsupported arch: $(uname -m))" >&2
+      return 0
+      ;;
+  esac
+  curl --compressed -fsSL "${url}" -o /tmp/snyk
+  chmod +x /tmp/snyk
+  sudo mv -f /tmp/snyk /usr/local/bin/snyk
+}
 
 install_1password_cli() {
   local op_version="2.32.1"