cross-spawn-esm 1.0.0 → 1.1.1

package/LICENSE

@@ -101,4 +101,84 @@ Github: <https://github.com/kevva/shebang-command>
 > AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 > LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 > OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
-> THE SOFTWARE.
+> THE SOFTWARE.
+
+## which
+
+Github: <https://github.com/npm/node-which>
+
+> The ISC License
+> 
+> Copyright (c) Isaac Z. Schlueter and Contributors
+> 
+> Permission to use, copy, modify, and/or distribute this software for any
+> purpose with or without fee is hereby granted, provided that the above
+> copyright notice and this permission notice appear in all copies.
+> 
+> THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+> WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+> MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+> ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+> WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+> ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
+> IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+## isexe
+
+Github: <https://github.com/isaacs/isexe>
+
+> # Blue Oak Model License
+> 
+> Version 1.0.0
+> 
+> ## Purpose
+> 
+> This license gives everyone as much permission to work with
+> this software as possible, while protecting contributors
+> from liability.
+> 
+> ## Acceptance
+> 
+> In order to receive this license, you must agree to its
+> rules.  The rules of this license are both obligations
+> under that agreement and conditions to your license.
+> You must not do anything with this software that triggers
+> a rule that you cannot or will not follow.
+> 
+> ## Copyright
+> 
+> Each contributor licenses you to do everything with this
+> software that would otherwise infringe that contributor's
+> copyright in it.
+> 
+> ## Notices
+> 
+> You must ensure that everyone who gets a copy of
+> any part of this software from you, with or without
+> changes, also gets the text of this license or a link to
+> <https://blueoakcouncil.org/license/1.0.0>.
+> 
+> ## Excuse
+> 
+> If anyone notifies you in writing that you have not
+> complied with [Notices](#notices), you can keep your
+> license by taking all practical steps to comply within 30
+> days after the notice.  If you do not do so, your license
+> ends immediately.
+> 
+> ## Patent
+> 
+> Each contributor licenses you to do everything with this
+> software that would otherwise infringe any patent claims
+> they can license or become able to license.
+> 
+> ## Reliability
+> 
+> No contributor can revoke this license.
+> 
+> ## No Liability
+> 
+> ***As far as the law allows, this software comes as is,
+> without any warranty or condition, and no contributor
+> will be liable to anyone for any damages related to this
+> software or this license, under any kind of legal claim.***

package/README.md

@@ -5,9 +5,6 @@
   <a href="https://github.com/Timbic/cross-spawn-esm"><img src="https://img.shields.io/badge/Github-gray.svg?logo=github" alt="github repo"></a>
 </p>
 
-> **Note:** This package is still in development and not recommended for production use yet. However, testing it in your projects is greatly
-> appreciated. If you find any errors, please open an issue - PRs are also welcomed!
-
 This is a "fork" of [cross-spawn](https://www.npmjs.com/package/cross-spawn?activeTab=readme) ( a cross-platform solution to node's spawn
 and spawnSync ) which ports its codebase to modern ESM and TypeScript.
 
@@ -65,7 +62,7 @@ const result = spawnSync("npm", ["list", "-g", "-depth", "0"], { stdio: "inherit
 
 - Overall smaller bundle size
 - Tree-shaking friendly
-- Fewer dependencies
+- Zero dependencies
 - No need for an additional types package (`@types/cross-spawn`)
 - Modern codebase and active maintenance
 - Better documentation
@@ -126,7 +123,7 @@ import { _parse, _enoent } from "cross-spawn-esm";
 >
 > **After**: const parsed = _parse.parse(...)
 
-- New `_utils` object exposes all the lower-level helpers (`shebangCommand`, `readShebang`, `detectShebang`, `enterCwd`, `resolveCommand`,
+- New `_utils` object exposes all the lower-level helpers (`shebangCommand`, `readShebang`, `detectShebang`, `resolveCommand`,
   `resolveCommandAttempt`, `escapeLineBreaks`, `escapeMetaChars`, `escapeCommand`, `escapeArgument`, `pathKey`) If you were relying on the
   original **cross-spawn** dependencies ( **path-key** and **shebang-command** ), their improved versions can be found in `_utils`.
 

package/dist/index.d.ts

@@ -13,10 +13,6 @@ interface ParsedCommand {
     args: ReadonlyArray<string>;
   };
 }
-/**
- * Change the process working directory to `cwd`.
- */
-declare function enterCwd(cwd?: string): boolean;
 /**
  * Resolve `parsed.command` to an absolute file path by searching the
  * environment's `PATH`, using the custom `cwd` when one is set.
@@ -222,7 +218,6 @@ export declare const _utils: {
   shebangCommand: typeof shebangCommand;
   readShebang: typeof readShebang;
   detectShebang: typeof detectShebang;
-  enterCwd: typeof enterCwd;
   resolveCommand: typeof resolveCommand;
   resolveCommandAttempt: typeof resolveCommandAttempt;
   escapeLineBreaks: typeof escapeLineBreaks;

package/dist/index.js

@@ -1,6 +1,5 @@
 import cp from "node:child_process";
 import path from "node:path";
-import which from "which";
 import fs from "node:fs";
 //#region src/utils/constants.ts
 const _cwd = process.cwd();
@@ -18,35 +17,72 @@ function pathKey({ env = _env, platform = _platform }) {
 	return platform === "win32" ? Object.keys(env).reverse().find((key) => key.toUpperCase() === "PATH") ?? "Path" : "PATH";
 }
 //#endregion
-//#region src/utils/resolve-command.ts
-function enterCwd(cwd) {
-	if (cwd == null) return false;
+//#region src/utils/isexe.ts
+const execOther = 1;
+const execGroup = 8;
+const execOwner = 64;
+const execOwnerOrGroup = 72;
+function isInPathExt(file, pathExt) {
+	const extensions = pathExt.split(path.delimiter);
+	if (extensions.includes("")) return true;
+	return extensions.some((ext) => {
+		const e = ext.toLowerCase();
+		return e !== "" && file.slice(-e.length).toLowerCase() === e;
+	});
+}
+function isExecutableMode(stat) {
+	const myUid = process.getuid?.();
+	const myGroups = process.getgroups?.() ?? [];
+	const myGid = process.getgid?.() ?? myGroups[0];
+	if (myUid === void 0 || myGid === void 0) throw new Error("cannot get uid or gid");
+	const groups = /* @__PURE__ */ new Set([myGid, ...myGroups]);
+	const { mode, uid, gid } = stat;
+	return !!(mode & execOther || mode & execGroup && groups.has(gid) || mode & execOwner && uid === myUid || mode & execOwnerOrGroup && myUid === 0);
+}
+function isexeSync(file, { pathExt = process.env.PATHEXT ?? "" } = {}) {
 	try {
-		process.chdir(cwd);
-		return true;
+		const stat = fs.statSync(file);
+		if (!stat.isFile()) return false;
+		return isWin ? isInPathExt(file, pathExt) : isExecutableMode(stat);
 	} catch {
 		return false;
 	}
 }
+//#endregion
+//#region src/utils/which.ts
+const pathSeparatorRegExp = new RegExp(`[${path.posix.sep}${path.sep === path.posix.sep ? "" : path.sep}]`.replace(/(\\)/g, "\\$1"));
+function whichSync(command, { cwd = _cwd, path: optPath = _env.PATH, pathExt: optPathExt = _env.PATHEXT } = {}) {
+	const delimiter = path.delimiter;
+	const dirs = command.match(pathSeparatorRegExp) ? [""] : [...isWin ? [cwd] : [], ...(optPath ?? "").split(delimiter)];
+	const pathExtExe = isWin ? optPathExt ?? [
+		".EXE",
+		".CMD",
+		".BAT",
+		".COM"
+	].join(delimiter) : void 0;
+	const extensions = pathExtExe?.split(delimiter).flatMap((ext) => [ext, ext.toLowerCase()]) ?? [""];
+	if (isWin && command.includes(".") && extensions[0] !== "") extensions.unshift("");
+	for (const dir of dirs) {
+		const base = path.resolve(cwd, dir === "" ? command : path.join(dir.replace(/^"(.*)"$/, "$1"), command));
+		for (const ext of extensions) {
+			const candidate = base + ext;
+			if (isexeSync(candidate, { pathExt: pathExtExe })) return candidate;
+		}
+	}
+	return null;
+}
+//#endregion
+//#region src/utils/resolve-command.ts
 function resolveCommandAttempt(parsed, withoutPathExt) {
 	const env = parsed.options.env ?? _env;
-	const cwd = parsed.options.cwd?.toString();
-	const switchCwd = process.chdir;
-	const switched = cwd != null && process.chdir !== void 0 && !switchCwd?.disabled && enterCwd(cwd);
-	try {
-		const resolved = which.sync(parsed.command, {
-			path: env[pathKey({ env })],
-			pathExt: withoutPathExt ? path.delimiter : void 0
-		});
-		return path.resolve(cwd ?? "", resolved);
-	} catch {
-		return null;
-	} finally {
-		if (switched) process.chdir(_cwd);
-	}
+	return whichSync(parsed.command, {
+		cwd: parsed.options.cwd?.toString(),
+		path: env[pathKey({ env })],
+		pathExt: withoutPathExt ? path.delimiter : void 0
+	});
 }
 function resolveCommand(parsed) {
-	return resolveCommandAttempt(parsed) ?? resolveCommandAttempt(parsed, true);
+	return resolveCommandAttempt(parsed) ?? (isWin ? resolveCommandAttempt(parsed, true) : null);
 }
 //#endregion
 //#region src/enoent.ts
@@ -195,7 +231,6 @@ const _utils = {
 	shebangCommand,
 	readShebang,
 	detectShebang,
-	enterCwd,
 	resolveCommand,
 	resolveCommandAttempt,
 	escapeLineBreaks,

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "cross-spawn-esm",
   "type": "module",
-  "version": "1.0.0",
+  "version": "1.1.1",
   "description": "ESM version of cross-spawn package",
   "author": "Timur Bikmuhametov <tim.bic22@gmail.com>",
   "license": "MIT",
@@ -32,14 +32,10 @@
   "publishConfig": {
     "access": "public"
   },
-  "dependencies": {
-    "which": "7.0.0"
-  },
   "devDependencies": {
     "@timbic/eslint-config": "1.2.2",
     "@timbic/prettier-config": "1.2.3",
     "@types/node": "26.6.1",
-    "@types/which": "3.0.4",
     "bumpp": "12.3.0",
     "eslint": "10.10.0",
     "husky": "9.1.7",