fyn 1.1.33 → 1.1.34

package/dist/fyn.js

@@ -2532,6 +2532,7 @@ const Crypto = __webpack_require__("crypto");
  *  ]
  * }
  * ```
+ *
  * @param {*} tree - the dir tree
  * @param {*} output - output object
  * @param {*} baseDir - base dir path
@@ -2674,7 +2675,7 @@ class FynCentral {
    *   to know if file changed.
    *
    * @param {*} integrity - shasum integrity for the package
-   * @returns
+   * @returns void
    */
 
 
@@ -2802,9 +2803,16 @@ class FynCentral {
   }
 
   _untarStream(tarStream, targetDir) {
-    const dirTree = {
-      "/": {}
+    // since we are using objects to store directory tree we have to
+    // create objects without the normal prototypes to avoid name conflict
+    // with file names
+    const newDirObj = () => {
+      const n = Object.create(null);
+      n["/"] = Object.create(null);
+      return n;
     };
+
+    const dirTree = newDirObj();
     const strip = 1;
     const untarStream = Tar.x({
       strip,
@@ -2815,9 +2823,7 @@ class FynCentral {
         const isDir = entry.type === "Directory";
         const dirs = parts.slice(strip, isDir ? parts.length : parts.length - 1);
         const wtree = dirs.reduce((wt, dir) => {
-          return wt[dir] || (wt[dir] = {
-            "/": {}
-          });
+          return wt[dir] || (wt[dir] = newDirObj());
         }, dirTree);
         if (isDir) return;
         const fname = parts[parts.length - 1];
@@ -2904,7 +2910,7 @@ class FynCentral {
         } else {
           logger.debug("storing tar to central store", pkgId, integrity);
           await this._storeTarStream(info, stream);
-          stream = undefined;
+          stream = undefined; // eslint-disable-line
 
           this._map.set(integrity, info);
 
@@ -4387,7 +4393,7 @@ class LocalPkgBuilder {
 
   async processItem(item) {
     if (!_.isEmpty(this._failedItems)) {
-      return;
+      return {};
     }
 
     const dispPath = Path.relative(this._options.fyn._cwd, item.fullPath);
@@ -4517,7 +4523,7 @@ module.exports = new CliLogger();
 
 "use strict";
 
-/* eslint-disable no-magic-numbers, max-statements */
+/* eslint-disable no-magic-numbers, max-statements, no-param-reassign */
 
 const MAX_PENDING_SHOW = 10;
 
@@ -4589,7 +4595,7 @@ module.exports = {
 
 "use strict";
 
-/* eslint-disable global-require, max-statements */
+/* eslint-disable global-require, max-statements, no-param-reassign */
 
 const Fs = __webpack_require__("./lib/util/file-ops.js");
 
@@ -5238,7 +5244,7 @@ module.exports = PkgDepLinker;
 
 "use strict";
 
-/* eslint-disable no-magic-numbers */
+/* eslint-disable no-magic-numbers, no-param-reassign */
 
 function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) { symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
 
@@ -5786,7 +5792,7 @@ module.exports = PkgDepLocker;
 
 "use strict";
 
-/* eslint-disable no-magic-numbers, max-params, max-statements, complexity */
+/* eslint-disable no-magic-numbers, max-params, max-statements, complexity, no-param-reassign */
 
 const _ = __webpack_require__("./node_modules/.f/_/lodash/4.17.21/lodash/lodash.min.js");
 
@@ -7652,7 +7658,7 @@ const {
   LOCK_RSEMVERS,
   SEMVER
 } = __webpack_require__("./lib/symbols.js");
-/* eslint-disable max-statements,no-magic-numbers,no-empty,complexity,prefer-template,max-len, max-depth */
+/* eslint-disable max-statements,no-magic-numbers,no-empty,complexity,prefer-template,max-len, max-depth, no-param-reassign */
 
 
 class PkgInstaller {
@@ -8326,7 +8332,7 @@ module.exports = PkgInstaller;
 
 "use strict";
 
-/* eslint-disable max-nested-callbacks */
+/* eslint-disable max-nested-callbacks, no-param-reassign */
 
 const assert = __webpack_require__("assert");
 
@@ -8725,7 +8731,7 @@ module.exports = PkgOptResolver;
 // - npm registry
 //
 
-/* eslint-disable no-magic-numbers, prefer-template, max-statements */
+/* eslint-disable no-magic-numbers, prefer-template, max-statements, no-param-reassign */
 
 function ownKeys(object, enumerableOnly) { var keys = Object.keys(object); if (Object.getOwnPropertySymbols) { var symbols = Object.getOwnPropertySymbols(object); if (enumerableOnly) { symbols = symbols.filter(function (sym) { return Object.getOwnPropertyDescriptor(object, sym).enumerable; }); } keys.push.apply(keys, symbols); } return keys; }
 
@@ -9571,7 +9577,7 @@ module.exports = {
 
 "use strict";
 
-/* eslint-disable max-params */
+/* eslint-disable max-params, no-param-reassign */
 
 const _ = __webpack_require__("./node_modules/.f/_/lodash/4.17.21/lodash/lodash.min.js");
 
@@ -10275,11 +10281,18 @@ async function generatePackTree(path, _logger = logger) {
   if (files.length > 1000) {
     _logger.warn(`Local linking package at ${path} has more than ${files.length} files.
   >>> This is unusual, please check package .npmignore or 'files' in package.json <<<`);
-  }
+  } // since we are using objects to store directory tree we have to
+  // create objects without the normal prototypes to avoid name conflict
+  // with file names
 
-  const fmap = {
-    [SYM_FILES]: []
+
+  const newDirObj = () => {
+    const n = Object.create(null);
+    n[SYM_FILES] = [];
+    return n;
   };
+
+  const fmap = newDirObj();
   files.sort().forEach(filePath => {
     const dir = Path.dirname(filePath);
 
@@ -10292,9 +10305,7 @@ async function generatePackTree(path, _logger = logger) {
 
     dir.split("/").forEach(d => {
       if (!dmap[d]) {
-        dmap[d] = {
-          [SYM_FILES]: []
-        };
+        dmap[d] = newDirObj();
       }
 
       dmap = dmap[d];
@@ -10573,7 +10584,7 @@ module.exports = __webpack_require__("./node_modules/.f/_/item-queue/1.1.2/item-
 
 "use strict";
 
-/* eslint-disable no-magic-numbers */
+/* eslint-disable no-magic-numbers, no-param-reassign */
 
 const chalk = __webpack_require__("./node_modules/.f/_/chalk/4.1.2/chalk/source/index.js");
 
@@ -10685,6 +10696,7 @@ module.exports = ItemQueue;
 
 "use strict";
 
+/* eslint-disable no-param-reassign */
 
 const Promise = __webpack_require__("./node_modules/.f/_/bluebird/3.7.2/bluebird/js/release/bluebird.js");
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fyn",
-  "version": "1.1.33",
+  "version": "1.1.34",
   "description": "The package manager for fynpo, a zero setup monorepo manager",
   "main": "./bin/fyn.js",
   "homepage": "https://jchip.github.io/fynpo/",