npq 3.11.2 → 3.11.4

package/bin/npq-hero.js

@@ -71,7 +71,6 @@ marshall
   })
   .then((result) => {
     if (result && result.countErrors > 0) {
-      // eslint-disable-next-line no-console
       console.log()
       return cliPrompt.prompt({
         name: 'install',
@@ -80,7 +79,6 @@ marshall
       })
     } else {
       if (result && result.countWarnings > 0) {
-        // eslint-disable-next-line no-console
         console.log()
         return cliPrompt.autoContinue({
           name: 'install',
@@ -93,7 +91,11 @@ marshall
     return { install: true }
   })
   .then((status) => {
-    if (status && status.hasOwnProperty('install') && status.install === true) {
+    if (
+      status &&
+      Object.prototype.hasOwnProperty.call(status, 'install') &&
+      status.install === true
+    ) {
       pkgMgr.process(PACKAGE_MANAGER_TOOL)
     }
   })

package/bin/npq.js

@@ -97,7 +97,6 @@ Promise.resolve()
     }
 
     if (result && result.countErrors > 0) {
-      // eslint-disable-next-line no-console
       console.log()
       return cliPrompt.prompt({
         name: 'install',
@@ -106,7 +105,6 @@ Promise.resolve()
       })
     } else {
       if (result && result.countWarnings > 0) {
-        // eslint-disable-next-line no-console
         console.log()
         return cliPrompt.autoContinue({
           name: 'install',
@@ -119,7 +117,11 @@ Promise.resolve()
     return { install: true }
   })
   .then((status) => {
-    if (status && status.hasOwnProperty('install') && status.install === true) {
+    if (
+      status &&
+      Object.prototype.hasOwnProperty.call(status, 'install') &&
+      status.install === true
+    ) {
       pkgMgr.process(cliArgs.packageManager)
     }
   })

package/lib/helpers/cliSpinner.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const growVertical = {
   interval: 120,
   frames: ['▁', '▃', '▄', '▅', '▆', '▇', '▆', '▅', '▄', '▃']

package/lib/helpers/cliSupportHandler.js

@@ -2,7 +2,6 @@
 
 const { styleText } = require('node:util')
 
-// eslint-disable-next-line security/detect-child-process
 const childProcess = require('child_process')
 const semver = require('semver')
 
@@ -20,10 +19,8 @@ function isEnvSupport() {
 
 function noSupportError(failFast) {
   if (isInteractiveTerminal()) {
-    // eslint-disable-next-line no-console
     console.error(styleText('red', 'error:'), 'npq suppressed due to old node version')
   } else {
-    // eslint-disable-next-line no-console
     console.error('error: npq suppressed due to old node version')
   }
 

package/lib/helpers/packageRepoUtils.js

@@ -85,7 +85,7 @@ class PackageRepoUtils {
           if (satisfyingVersion) {
             return satisfyingVersion
           }
-        } catch (error) {
+        } catch {
           // semver.maxSatisfying throws if the range is invalid, continue to error below
         }
       }

package/lib/helpers/promiseThrottler.js

@@ -1,3 +1,5 @@
+'use strict'
+
 // Example use-case
 //
 // Using the new throttling mechanism - each audit will be throttled globally

package/lib/helpers/reportResults.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const { styleText } = require('node:util')
 const { marshallCategories } = require('../marshalls/constants')
 const { isInteractiveTerminal } = require('./cliSupportHandler')
@@ -12,7 +14,7 @@ function getTerminalWidth() {
       const [columns] = process.stdout.getWindowSize()
       return columns
     }
-  } catch (error) {
+  } catch {
     // Fallback if terminal size detection fails
   }
   return 80 // Default fallback width
@@ -25,6 +27,7 @@ function getTerminalWidth() {
  */
 function getDisplayLength(str) {
   // Remove ANSI escape sequences to get actual character count
+  // eslint-disable-next-line no-control-regex
   return str.replace(/\u001b\[[0-9;]*m/g, '').length
 }
 

package/lib/helpers/sourcePackages.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const path = require('node:path')
 const fs = require('node:fs/promises')
 

package/lib/marshall.js

@@ -1,4 +1,3 @@
-/* eslint-disable no-console */
 'use strict'
 
 // const util = require('node:util')

package/lib/marshalls/age.marshall.js

@@ -19,50 +19,47 @@ class Marshall extends BaseMarshall {
     return 'Checking package maturity'
   }
 
-  validate(pkg) {
-    let packageData = null
-    let ageDateDiff = null
-    return this.packageRepoUtils
-      .getPackageInfo(pkg.packageName)
-      .then((data) => {
-        if (data && data.time && data.time.created) {
-          packageData = data
-          const pkgCreatedDate = data.time.created
-          const dateDiff = Date.now() - Date.parse(pkgCreatedDate)
+  async validate(pkg) {
+    const data = await this.packageRepoUtils.getPackageInfo(pkg.packageName)
 
-          ageDateDiff = dateDiff
-          if (dateDiff < PACKAGE_AGE_THRESHOLD) {
-            throw new Error(
-              `Detected a newly published package (created < ${PACKAGE_AGE_THRESHOLD} days) act carefully`
-            )
-          }
+    if (!data || !data.time || !data.time.created) {
+      throw new Warning('Could not determine package age')
+    }
 
-          return pkg
-        } else {
-          throw new Warning('Could not determine package age')
-        }
-      })
-      .then((pkg) => {
-        return this.packageRepoUtils.getSemVer(pkg.packageName, pkg.packageVersion)
-      })
-      .then((versionResolved) => {
-        const versionReleaseDate = packageData.time[versionResolved]
-        const versionDateDiff = new Date() - new Date(versionReleaseDate)
+    const pkgCreatedDate = data.time.created
+    const dateDiff = Date.now() - Date.parse(pkgCreatedDate)
 
-        const versionDateDiffInDays = Math.round(versionDateDiff / (1000 * 60 * 60 * 24))
+    if (dateDiff < PACKAGE_AGE_THRESHOLD) {
+      throw new Error(
+        `Detected a newly published package (created < ${PACKAGE_AGE_THRESHOLD} days) act carefully`
+      )
+    }
 
-        let timeAgoText = 'days'
-        let timeAgoNumber = versionDateDiffInDays
+    const packageVersion = await this.resolvePackageVersion(
+      pkg.packageName,
+      pkg.packageVersion,
+      data
+    )
 
-        if (versionDateDiffInDays >= 365) {
-          timeAgoText = 'years'
-          timeAgoNumber = Math.floor(versionDateDiffInDays / 365)
-        }
+    if (!packageVersion || !data.time[packageVersion]) {
+      throw new Warning('Could not determine package version release date')
+    }
 
-        if (versionDateDiffInDays >= PACKAGE_AGE_UNMAINTAINED_RISK) {
-          throw new Warning(`Detected an old package (created ${timeAgoNumber} ${timeAgoText} ago)`)
-        }
-      })
+    const versionReleaseDate = data.time[packageVersion]
+    const versionDateDiff = new Date() - new Date(versionReleaseDate)
+    const versionDateDiffInDays = Math.round(versionDateDiff / (1000 * 60 * 60 * 24))
+
+    let timeAgoText = 'days'
+    let timeAgoNumber = versionDateDiffInDays
+
+    if (versionDateDiffInDays >= 365) {
+      timeAgoText = 'years'
+      timeAgoNumber = Math.floor(versionDateDiffInDays / 365)
+    }
+
+    if (versionDateDiffInDays >= PACKAGE_AGE_UNMAINTAINED_RISK) {
+      throw new Warning(`Detected an old package (created ${timeAgoNumber} ${timeAgoText} ago)`)
+    }
   }
 }
 

package/lib/marshalls/author.marshall.js

@@ -48,7 +48,7 @@ class Marshall extends BaseMarshall {
 
     // Agree with Colin on keeping email regex simple: https://colinhacks.com/essays/reasonable-email-regex
     const emailRegex =
-      /^(?!\.)(?!.*\.\.)([a-z0-9_'+\-\.]*)[a-z0-9_'+\-]@([a-z0-9][a-z0-9\-]*\.)+[a-z]{2,}$/i
+      /^(?!\.)(?!.*\.\.)([a-z0-9_'+\-.]*)[a-z0-9_'+-]@([a-z0-9][a-z0-9-]*\.)+[a-z]{2,}$/i
     if (!emailRegex.test(npmUser.email)) {
       throw new Error('The publishing user has no valid email address')
     }

package/lib/marshalls/baseMarshall.js

@@ -67,6 +67,32 @@ class BaseMarshall {
       message: msg.message
     })
   }
+
+  /**
+   * Resolves a package version string to an actual semver version
+   * Handles dist-tags (latest, beta, etc.) and direct semver versions
+   * @param {string} packageName - The package name
+   * @param {string} versionSpec - The version specification (could be dist-tag or semver)
+   * @param {Object} packageData - Optional package data to avoid re-fetching
+   * @returns {Promise<string|null>} - The resolved semver version or null if not found
+   */
+  async resolvePackageVersion(packageName, versionSpec, packageData = null) {
+    // Get package data if not provided
+    const data = packageData || (await this.packageRepoUtils.getPackageInfo(packageName))
+
+    if (!data || !data['dist-tags']) {
+      return null
+    }
+
+    // Check if versionSpec is a dist-tag
+    if (Object.prototype.hasOwnProperty.call(data['dist-tags'], versionSpec)) {
+      return data['dist-tags'][versionSpec]
+    }
+
+    // If not a dist-tag, try parsing as semver
+    const parsed = this.packageRepoUtils.parsePackageVersion(versionSpec)
+    return parsed ? parsed.version : null
+  }
 }
 
 module.exports = BaseMarshall

package/lib/marshalls/constants.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const marshallCategories = {
   SupplyChainSecurity: {
     id: 'SupplyChainSecurity',

package/lib/marshalls/deprecation.marshall.js

@@ -16,27 +16,32 @@ class Marshall extends BaseMarshall {
     return 'Checking package for deprecation flag'
   }
 
-  validate(pkg) {
-    return this.packageRepoUtils.getPackageInfo(pkg.packageName).then((data) => {
-      const packageVersion =
-        pkg.packageVersion === 'latest'
-          ? data['dist-tags'] && data['dist-tags'].latest
-          : this.packageRepoUtils.parsePackageVersion(pkg.packageVersion).version
-
-      if (!packageVersion) {
-        return true
-      }
-
-      const packageDeprecated =
-        data &&
-        data.versions &&
-        data.versions[packageVersion] &&
-        data.versions[packageVersion].deprecated
-
-      if (packageDeprecated) {
-        throw new Error(`Package deprecated: ${packageDeprecated}`)
-      }
-    })
+  async validate(pkg) {
+    const data = await this.packageRepoUtils.getPackageInfo(pkg.packageName)
+
+    if (!data) {
+      return true
+    }
+
+    const packageVersion = await this.resolvePackageVersion(
+      pkg.packageName,
+      pkg.packageVersion,
+      data
+    )
+
+    if (!packageVersion) {
+      return true
+    }
+
+    const packageDeprecated =
+      data &&
+      data.versions &&
+      data.versions[packageVersion] &&
+      data.versions[packageVersion].deprecated
+
+    if (packageDeprecated) {
+      throw new Error(`Package deprecated: ${packageDeprecated}`)
+    }
   }
 }
 

package/lib/marshalls/index.js

@@ -24,7 +24,6 @@ class Marshalls {
     }
 
     const marshallTasks = marshalls.reduce((prev, curr) => {
-      // eslint-disable-next-line security/detect-non-literal-require
       const Marshall = require(curr)
       const marshall = new Marshall(config)
 

package/lib/marshalls/newbin.marshall.js

@@ -25,9 +25,10 @@ class NewBinMarshall extends BaseMarshall {
       return
     }
 
-    const targetVersionString = await this.packageRepoUtils.getSemVer(
+    const targetVersionString = await this.resolvePackageVersion(
       pkg.packageName,
-      pkg.packageVersion
+      pkg.packageVersion,
+      fullPackageInfo
     )
 
     if (!targetVersionString || !fullPackageInfo.versions[targetVersionString]) {
@@ -55,7 +56,9 @@ class NewBinMarshall extends BaseMarshall {
       previousVersionData.name || pkg.packageName
     )
 
-    const newBinaries = Object.keys(newBin).filter((key) => !oldBin.hasOwnProperty(key))
+    const newBinaries = Object.keys(newBin).filter(
+      (key) => !Object.prototype.hasOwnProperty.call(oldBin, key)
+    )
 
     if (newBinaries.length > 0) {
       newBinaries.forEach((binaryName) => {

package/lib/marshalls/provenance.marshall.js

@@ -22,6 +22,8 @@ class Marshall extends BaseMarshall {
   validate(pkg) {
     const validationMetadata = {}
 
+    // removed debug log
+
     return (
       this.packageRepoUtils
         .getPackageInfo(pkg.packageName)
@@ -188,7 +190,6 @@ class Marshall extends BaseMarshall {
     const registryKeysEndpoint = '/-/npm/v1/keys'
 
     const registryKeysUrl = `${registryHost}${registryKeysEndpoint}`
-    // eslint-disable-next-line no-undef
     return fetch(registryKeysUrl)
       .then((response) => {
         return response.json()

package/lib/marshalls/repo.marshall.js

@@ -30,7 +30,7 @@ class Marshall extends BaseMarshall {
         try {
           urlStructure = new URL(lastVersionData.repository.url)
           urlOfGitRepository = new URL(`https://${urlStructure.host}${urlStructure.pathname}`)
-        } catch (error) {
+        } catch {
           throw new Warning('No valid repository is associated with the package')
         }
         return fetch(urlOfGitRepository.href).catch(() => {

package/lib/marshalls/scripts.marshall.js

@@ -16,40 +16,46 @@ class Marshall extends BaseMarshall {
     return 'Checking package for pre/post install scripts'
   }
 
-  validate(pkg) {
-    return this.packageRepoUtils.getPackageInfo(pkg.packageName).then((data) => {
-      const packageVersion =
-        pkg.packageVersion === 'latest'
-          ? data['dist-tags'] && data['dist-tags'].latest
-          : this.packageRepoUtils.parsePackageVersion(pkg.packageVersion).version
-
-      if (!packageVersion) {
-        return true
-      }
+  async validate(pkg) {
+    const data = await this.packageRepoUtils.getPackageInfo(pkg.packageName)
+
+    if (!data) {
+      return true
+    }
 
-      const packageScripts =
-        data &&
-        data.versions &&
-        data.versions[packageVersion] &&
-        data.versions[packageVersion].scripts
-
-      // blacklisted scripts due to possible malicious intent:
-      const blacklistScripts = ['install', 'preinstall', 'postinstall']
-
-      blacklistScripts.forEach((scriptName) => {
-        if (
-          packageScripts &&
-          packageScripts.hasOwnProperty(scriptName) &&
-          packageScripts[scriptName].length > 0
-        ) {
-          throw new Error(
-            `Detected a possible malicious intent script, audit required: ${scriptName}: ${packageScripts[scriptName]}`
-          )
-        }
-      })
+    const packageVersion = await this.resolvePackageVersion(
+      pkg.packageName,
+      pkg.packageVersion,
+      data
+    )
 
+    if (!packageVersion) {
       return true
+    }
+
+    const packageScripts =
+      data &&
+      data.versions &&
+      data.versions[packageVersion] &&
+      data.versions[packageVersion].scripts
+
+    // blacklisted scripts due to possible malicious intent:
+    const blacklistScripts = ['install', 'preinstall', 'postinstall']
+
+    blacklistScripts.forEach((scriptName) => {
+      if (
+        packageScripts &&
+        packageScripts[scriptName] &&
+        String(packageScripts[scriptName]).length > 0
+      ) {
+        const scriptContent = packageScripts[scriptName]
+        throw new Error(
+          `Detected a possible malicious intent script, audit required: ${scriptName}: ${scriptContent}`
+        )
+      }
     })
+
+    return true
   }
 }
 

package/lib/marshalls/signatures.marshall.js

@@ -63,7 +63,6 @@ class Marshall extends BaseMarshall {
     const registryKeysEndpoint = '/-/npm/v1/keys'
 
     const registryKeysUrl = `${registryHost}${registryKeysEndpoint}`
-    // eslint-disable-next-line no-undef
     return fetch(registryKeysUrl)
       .then((response) => {
         return response.json()

package/lib/marshalls/snyk.marshall.js

@@ -163,7 +163,7 @@ class Marshall extends BaseMarshall {
           return snykConfig.api
         }
       }
-    } catch (error) {
+    } catch {
       return null
     }
 

package/lib/marshalls/typosquatting.marshall.js

@@ -23,7 +23,6 @@ class Marshall extends BaseMarshall {
   validate(pkg) {
     let levenshteinDistance = null
     let similarPackages = []
-    let packageFoundInTopPackages = false
     return new Promise((resolve, reject) => {
       // If package is within an allow-list
       if (this.packageRepoUtils.isPackageInAllowList(pkg.packageName)) {
@@ -34,7 +33,6 @@ class Marshall extends BaseMarshall {
         // If the package to be installed is itself found within the Top Packages dataset
         // then we don't report on it
         if (pkg.packageName === popularPackageNameInRepository) {
-          packageFoundInTopPackages = true
           return resolve([])
         }
 

package/lib/marshalls/version-maturity.marshall.js

@@ -17,50 +17,45 @@ class Marshall extends BaseMarshall {
     return 'Checking version maturity'
   }
 
-  validate(pkg) {
-    let packageData = null
-    return this.packageRepoUtils
-      .getPackageInfo(pkg.packageName)
-      .then((data) => {
-        if (data && data.time) {
-          packageData = data
-          return pkg
-        } else {
-          throw new Error('Could not determine package version information')
-        }
-      })
-      .then((pkg) => {
-        return this.packageRepoUtils.getSemVer(pkg.packageName, pkg.packageVersion)
-      })
-      .then((versionResolved) => {
-        const versionReleaseDate = packageData.time[versionResolved]
-
-        if (!versionReleaseDate) {
-          throw new Error(`Could not determine release date for version ${versionResolved}`)
-        }
-
-        const versionDateDiff = new Date() - new Date(versionReleaseDate)
-        const versionDateDiffInDays = Math.round(versionDateDiff / (1000 * 60 * 60 * 24))
-
-        if (versionDateDiffInDays < VERSION_AGE_THRESHOLD) {
-          let timeAgoText = 'days'
-          let timeAgoNumber = versionDateDiffInDays
-
-          if (versionDateDiffInDays === 0) {
-            timeAgoText = 'hours'
-            const versionDateDiffInHours = Math.round(versionDateDiff / (1000 * 60 * 60))
-            timeAgoNumber = versionDateDiffInHours
-          } else if (versionDateDiffInDays === 1) {
-            timeAgoText = 'day'
-          }
-
-          throw new Error(
-            `Detected a recently published version (published ${timeAgoNumber} ${timeAgoText} ago) - consider waiting for community review`
-          )
-        }
-
-        return pkg
-      })
+  async validate(pkg) {
+    const data = await this.packageRepoUtils.getPackageInfo(pkg.packageName)
+
+    if (!data || !data.time) {
+      throw new Error('Could not determine package version information')
+    }
+
+    const packageVersion = await this.resolvePackageVersion(
+      pkg.packageName,
+      pkg.packageVersion,
+      data
+    )
+
+    if (!packageVersion || !Object.prototype.hasOwnProperty.call(data.time, packageVersion)) {
+      throw new Error(`Could not determine release date for version ${packageVersion}`)
+    }
+
+    const versionReleaseDate = data.time[packageVersion]
+    const versionDateDiff = new Date() - new Date(versionReleaseDate)
+    const versionDateDiffInDays = Math.round(versionDateDiff / (1000 * 60 * 60 * 24))
+
+    if (versionDateDiffInDays < VERSION_AGE_THRESHOLD) {
+      let timeAgoText = 'days'
+      let timeAgoNumber = versionDateDiffInDays
+
+      if (versionDateDiffInDays === 0) {
+        timeAgoText = 'hours'
+        const versionDateDiffInHours = Math.round(versionDateDiff / (1000 * 60 * 60))
+        timeAgoNumber = versionDateDiffInHours
+      } else if (versionDateDiffInDays === 1) {
+        timeAgoText = 'day'
+      }
+
+      throw new Error(
+        `Detected a recently published version (published ${timeAgoNumber} ${timeAgoText} ago) - consider waiting for community review`
+      )
+    }
+
+    return pkg
   }
 }
 

package/lib/packageManager.js

@@ -1,4 +1,3 @@
-/* eslint-disable indent */
 'use strict'
 
 const childProcess = require('child_process')

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "npq",
-  "version": "3.11.2",
+  "version": "3.11.4",
   "description": "marshall your npm/npm package installs with high quality and class 🎖",
   "bin": {
     "npq": "./bin/npq.js",
@@ -9,19 +9,16 @@
   "scripts": {
     "lint": "eslint && npm run lint:lockfile",
     "lint:lockfile": "lockfile-lint --path package-lock.json --type npm --validate-https --allowed-hosts npm npm",
-    "test": "cross-env NODE_OPTIONS=\"--experimental-vm-modules\" jest",
+    "fix": "eslint --fix",
+    "test": "jest",
     "build": "node scripts/build.js",
-    "test:watch": "cross-env NODE_OPTIONS=\"--experimental-vm-modules\" jest --watch",
-    "coverage:view": "opn coverage/lcov-report/index.html",
+    "test:watch": "jest --watch",
     "commit": "git-cz",
     "format": "prettier --config .prettierrc.js --write \"**/*.js\"",
-    "docs": "npm run docs:code && npm run docs:api",
-    "docs:api": "doxdox \"*.js\" --layout bootstrap --output docs/index.html",
-    "docs:code": "docco \"*.js\" --output docs/code",
     "semantic-release": "npx semantic-release",
     "#postinstall": "node scripts/postinstall.js",
     "#preuninstall": "node scripts/preuninstall.js",
-    "#prepare": "husky install"
+    "prepare": "husky || true"
   },
   "engines": {
     "node": ">=20.13.0"
@@ -52,59 +49,21 @@
     "semver": "^7.7.2"
   },
   "devDependencies": {
-    "@babel/core": "^7.28.0",
-    "@babel/plugin-transform-runtime": "^7.28.0",
-    "@babel/preset-env": "^7.28.0",
-    "@babel/runtime": "^7.28.2",
-    "@babel/types": "^7.28.2",
     "@commitlint/cli": "^19.8.1",
     "@commitlint/config-angular": "^19.8.1",
+    "@eslint/js": "^9.32.0",
     "commitizen": "^4.3.1",
-    "cross-env": "^10.0.0",
     "cz-conventional-changelog": "^3.3.0",
     "eslint": "^9.32.0",
-    "eslint-plugin-import": "^2.32.0",
+    "eslint-plugin-n": "^17.21.3",
     "eslint-plugin-security": "^3.0.1",
+    "globals": "^16.3.0",
     "husky": "^9.1.7",
     "jest": "^30.0.5",
     "lint-staged": "^16.1.4",
     "lockfile-lint": "^4.14.1",
     "prettier": "^3.6.2"
   },
-  "jest": {
-    "testEnvironment": "node",
-    "verbose": true,
-    "notify": false,
-    "collectCoverage": true,
-    "coverageThreshold": {
-      "global": {
-        "branches": 75,
-        "functions": 75,
-        "lines": 75,
-        "statements": 75
-      },
-      "scripts/*": {
-        "branches": 60,
-        "functions": 90,
-        "lines": 80,
-        "statements": 80
-      }
-    },
-    "testMatch": [
-      "**/__tests__/**/*.test.js"
-    ],
-    "testPathIgnorePatterns": [
-      "/__tests__/__fixtures__/*"
-    ]
-  },
-  "babel": {
-    "presets": [
-      "@babel/env"
-    ],
-    "plugins": [
-      "@babel/plugin-transform-runtime"
-    ]
-  },
   "config": {
     "commitizen": {
       "path": "./node_modules/cz-conventional-changelog"
@@ -118,72 +77,9 @@
   "lint-staged": {
     "**/*.js": [
       "npm run format",
-      "npm run lint",
-      "git add"
+      "npm run lint"
     ]
   },
-  "eslintConfig": {
-    "env": {
-      "node": true,
-      "es6": true,
-      "jest": true
-    },
-    "plugins": [
-      "node",
-      "security"
-    ],
-    "extends": [
-      "plugin:node/recommended",
-      "plugin:security/recommended"
-    ],
-    "rules": {
-      "semi": "off",
-      "no-process-exit": "off",
-      "node/no-unsupported-features": "off",
-      "node/no-unpublished-require": "off",
-      "security/detect-non-literal-fs-filename": "warn",
-      "security/detect-unsafe-regex": "warn",
-      "security/detect-buffer-noassert": "error",
-      "security/detect-child-process": "warn",
-      "security/detect-disable-mustache-escape": "error",
-      "security/detect-eval-with-expression": "error",
-      "security/detect-no-csrf-before-method-override": "error",
-      "security/detect-non-literal-regexp": "error",
-      "security/detect-non-literal-require": "warn",
-      "security/detect-object-injection": "off",
-      "security/detect-possible-timing-attacks": "error",
-      "security/detect-pseudoRandomBytes": "error",
-      "node/no-unsupported-features/node-builtins": [
-        "error",
-        {
-          "version": ">=18.17.0",
-          "ignores": []
-        }
-      ],
-      "node/no-unsupported-features/es-syntax": [
-        "error",
-        {
-          "version": ">=18.17.0",
-          "ignores": []
-        }
-      ]
-    },
-    "overrides": [
-      {
-        "files": [
-          "__tests__/*"
-        ],
-        "rules": {
-          "node/no-unsupported-features/es-syntax": "off"
-        }
-      }
-    ],
-    "parserOptions": {
-      "ecmaFeatures": {
-        "impliedStrict": true
-      }
-    }
-  },
   "release": {
     "branches": [
       "main"

package/scripts/build.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const fs = require('fs/promises')
 const path = require('path')
 

package/scripts/postinstall.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const fs = require('fs')
 const { styleText } = require('node:util')
 const semver = require('semver')

package/scripts/preuninstall.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const helpers = require('./scriptHelpers')
 
 const runPreUninstall = async () => {

package/scripts/scriptHelpers.js

@@ -1,3 +1,5 @@
+'use strict'
+
 const fs = require('fs')
 const os = require('os')
 const path = require('path')