lynxor 1.1.0 → 1.1.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +2 -2
- package/package.json +4 -4
- package/scripts/install.js +2 -2
package/README.md
CHANGED
|
@@ -2,11 +2,11 @@
|
|
|
2
2
|
|
|
3
3
|
A 10-second security sanity check for Git repositories: committed secrets, exposed keys, risky Dockerfile patterns, CI/CD misconfigurations, and known-vulnerable dependencies.
|
|
4
4
|
|
|
5
|
-
This package is a thin installer: `postinstall` downloads the precompiled `lynxor` binary matching your platform from [GitHub Releases](https://github.com/
|
|
5
|
+
This package is a thin installer: `postinstall` downloads the precompiled `lynxor` binary matching your platform from [GitHub Releases](https://github.com/chebilax/lynxor/releases), verifies its checksum, and wires it up as the `lynxor` command. Supported: Linux/macOS/Windows on amd64/arm64.
|
|
6
6
|
|
|
7
7
|
```bash
|
|
8
8
|
npm install -g lynxor
|
|
9
9
|
lynxor scan .
|
|
10
10
|
```
|
|
11
11
|
|
|
12
|
-
Full documentation, flags, and design decisions: [github.com/
|
|
12
|
+
Full documentation, flags, and design decisions: [github.com/chebilax/lynxor](https://github.com/chebilax/lynxor).
|
package/package.json
CHANGED
|
@@ -1,15 +1,15 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "lynxor",
|
|
3
|
-
"version": "1.1.
|
|
3
|
+
"version": "1.1.2",
|
|
4
4
|
"description": "A 10-second security sanity check for Git repositories -- committed secrets, exposed keys, risky Dockerfile patterns, CI/CD misconfigurations, and known-vulnerable dependencies. This package downloads the matching precompiled lynxor binary from GitHub Releases on install.",
|
|
5
5
|
"license": "MIT",
|
|
6
6
|
"repository": {
|
|
7
7
|
"type": "git",
|
|
8
|
-
"url": "git+https://github.com/
|
|
8
|
+
"url": "git+https://github.com/chebilax/lynxor.git",
|
|
9
9
|
"directory": "npm"
|
|
10
10
|
},
|
|
11
|
-
"homepage": "https://github.com/
|
|
12
|
-
"bugs": "https://github.com/
|
|
11
|
+
"homepage": "https://github.com/chebilax/lynxor",
|
|
12
|
+
"bugs": "https://github.com/chebilax/lynxor/issues",
|
|
13
13
|
"bin": {
|
|
14
14
|
"lynxor": "bin/lynxor.js"
|
|
15
15
|
},
|
package/scripts/install.js
CHANGED
|
@@ -37,7 +37,7 @@ async function main() {
|
|
|
37
37
|
fail(
|
|
38
38
|
`unsupported platform/arch combination: ${process.platform}/${process.arch}. ` +
|
|
39
39
|
`Supported: ${Object.keys(PLATFORMS).join(", ")} x ${Object.keys(ARCHES).join(", ")}. ` +
|
|
40
|
-
`Build from source instead: https://github.com/
|
|
40
|
+
`Build from source instead: https://github.com/chebilax/lynxor#install--build`,
|
|
41
41
|
);
|
|
42
42
|
}
|
|
43
43
|
|
|
@@ -46,7 +46,7 @@ async function main() {
|
|
|
46
46
|
const tag = `v${version}`;
|
|
47
47
|
const ext = platform === "windows" ? "zip" : "tar.gz";
|
|
48
48
|
const archiveName = `lynxor_${platform}_${arch}.${ext}`;
|
|
49
|
-
const base = `https://github.com/
|
|
49
|
+
const base = `https://github.com/chebilax/lynxor/releases/download/${tag}`;
|
|
50
50
|
|
|
51
51
|
console.log(`lynxor: fetching ${archiveName} (${tag})...`);
|
|
52
52
|
const [archive, checksums] = await Promise.all([
|