launch-unity 0.5.0 → 0.6.1

package/README.ja.md

@@ -5,6 +5,16 @@ launch-unity
 
 Unity Hubを仲介せず、コマンドラインからUnityを立ち上げます。
 
+## インストール
+
+```bash
+# グローバルインストール
+npm install -g launch-unity
+
+# npxで一時利用（インストール不要）
+npx launch-unity
+```
+
 ## 使用例
 ```bash
 # NPX（推奨 / インストール不要）
@@ -62,5 +72,14 @@ quit-unity [PROJECT_PATH] [--timeout <ms>] [--force]
 # -h, --help          ヘルプ
 ```
 
+## セキュリティ
+
+このプロジェクトはサプライチェーン攻撃対策を実施しています：
+
+- **ignore-scripts**: `npm install` 時の自動スクリプト実行を無効化
+- **Dependabot**: 週次の自動セキュリティアップデート
+- **Security audit CI**: PR ごとに `npm audit` と `lockfile-lint` を実行
+- **バージョン固定**: すべての依存関係で厳密なバージョンを指定（`^` や `~` 不使用）
+
 ## ライセンス
 - MIT。詳細は `LICENSE` を参照してください。

package/README.md

@@ -5,6 +5,16 @@ launch-unity
 
 Without Unity Hub, launch Unity from the command line.
 
+## Installation
+
+```bash
+# Global install
+npm install -g launch-unity
+
+# Use via npx (no install required)
+npx launch-unity
+```
+
 ## Usage Examples
 ```bash
 # NPX (recommended, zero install)
@@ -42,16 +52,6 @@ Default Unity paths assumed:
   - `C:\\Program Files\\Unity\\Hub\\Editor\\<version>\\Editor\\Unity.exe`
 
 
-## Quick Setup
-```bash
-# No install: use npx
-npx launch-unity -h
-
-# Optional: install globally after cloning
-npm i -g .
-```
-
-
 ## Detailed Usage
 ```bash
 # Basic syntax
@@ -86,5 +86,14 @@ quit-unity [PROJECT_PATH] [--timeout <ms>] [--force]
 - Linux: Not supported yet. Contributions are welcome.
 
 
+## Security
+
+This project implements supply chain attack prevention measures:
+
+- **ignore-scripts**: Disables automatic script execution during `npm install`
+- **Dependabot**: Automated weekly security updates
+- **Security audit CI**: Runs `npm audit` and `lockfile-lint` on every PR
+- **Pinned versions**: All dependencies use exact versions (no `^` or `~`)
+
 ## License
 - MIT. See `LICENSE` for details.

package/dist/launch.js

@@ -428,7 +428,7 @@ function listSubdirectoriesSorted(dir) {
         subdirs.sort((a, b) => a.localeCompare(b));
         entries = subdirs.map((name) => join(dir, name));
     }
-    catch (_err) {
+    catch {
         // Ignore directories we cannot read
         entries = [];
     }
@@ -440,7 +440,7 @@ function findUnityProjectBfs(rootDir, maxDepth) {
     try {
         rootCanonical = realpathSync(rootDir);
     }
-    catch (_err) {
+    catch {
         rootCanonical = rootDir;
     }
     queue.push({ dir: rootCanonical, depth: 0 });
@@ -467,13 +467,13 @@ function findUnityProjectBfs(rootDir, maxDepth) {
                     try {
                         childCanonical = realpathSync(child);
                     }
-                    catch (_e) {
+                    catch {
                         // Broken symlink: skip
                         continue;
                     }
                 }
             }
-            catch (_err) {
+            catch {
                 continue;
             }
             const key = toComparablePath(normalizePath(childCanonical));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "launch-unity",
-  "version": "0.5.0",
+  "version": "0.6.1",
   "description": "Open a Unity project with the matching Editor version (macOS/Windows)",
   "type": "module",
   "main": "dist/launch.js",
@@ -39,15 +39,18 @@
     "node": ">=18"
   },
   "devDependencies": {
-    "@types/node": "^22.7.4",
-    "@typescript-eslint/eslint-plugin": "^8.6.0",
-    "@typescript-eslint/parser": "^8.6.0",
-    "eslint": "^9.10.0",
-    "eslint-config-prettier": "^9.1.0",
-    "prettier": "^3.3.3",
-    "typescript": "^5.6.2"
+    "@types/node": "24.10.1",
+    "@typescript-eslint/eslint-plugin": "8.48.0",
+    "@typescript-eslint/parser": "8.48.0",
+    "eslint": "9.39.1",
+    "eslint-config-prettier": "10.1.8",
+    "prettier": "3.7.3",
+    "typescript": "5.9.3"
   },
   "dependencies": {
-    "typescript-eslint": "^8.42.0"
+    "typescript-eslint": "8.48.0"
+  },
+  "overrides": {
+    "js-yaml": "4.1.1"
   }
 }