nw 0.90.0 → 0.91.0

package/LICENSE

@@ -0,0 +1,20 @@
+Copyright (c) 2011-2019 NW.js Authors
+Copyright (c) 2011-2019 The Chromium Authors
+Copyright (c) 2011-2018 Intel Corp
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of 
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to use, 
+copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the 
+Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR 
+A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN 
+ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH
+THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "nw",
-  "version": "0.90.0",
+  "version": "0.91.0",
   "description": "An installer for NW.js",
   "repository": {
     "type": "git",
@@ -14,8 +14,7 @@
   "scripts": {
     "postinstall": "node src/postinstall.js",
     "test": "vitest run",
-    "test:coverage": "vitest --coverage.enabled true",
-    "license-check": "jsgl -l ."
+    "test:coverage": "vitest --coverage.enabled true"
   },
   "files": [
     "src"
@@ -32,7 +31,7 @@
   ],
   "license": "MIT",
   "dependencies": {
-    "axios": "^1.7.2",
+    "axios": "^1.7.4",
     "commander": "^12.1.0",
     "semver": "^7.6.3",
     "tar": "^7.4.3",
@@ -51,9 +50,7 @@
     "application"
   ],
   "devDependencies": {
-    "@vitest/coverage-v8": "^2.0.4",
-    "js-green-licenses": "^4.0.0",
-    "patch-package": "^8.0.0",
+    "@vitest/coverage-v8": "^2.0.5",
     "selenium-webdriver": "^4.23.0",
     "vitest": "^2.0.2"
   }

package/src/get.js

@@ -96,6 +96,12 @@ async function get(options) {
 
   await decompress(nwFilePath, options.cacheDir);
 
+  await verify(
+    `${options.downloadUrl}/v${options.version}/SHASUMS256.txt`,
+    `${options.cacheDir}/shasum/${options.version}.txt`,
+    options.cacheDir,
+  );
+
   await fs.promises.symlink(nwDirPath, './nwjs', );
 
   if (options.ffmpeg === true) {

package/src/verify.js

@@ -0,0 +1,47 @@
+import crypto from 'node:crypto';
+import fs from 'node:fs';
+import path from 'node:path';
+
+import request from './request.js';
+import util from './util.js';
+
+/**
+ * Verify the SHA256 checksum of downloaded artifacts.
+ *
+ * @param {string} shaUrl - URL to get the shasum text file from.
+ * @param {string} shaOut - File path to shasum text file.
+ * @param {string} cacheDir - File path to cache directory.
+ * @throws {Error}
+ * @returns {Promise<boolean>}
+ */
+export default async function verify(shaUrl, shaOut, cacheDir) {
+  const shaOutExists = await util.fileExists(shaOut);
+
+  if (shaOutExists === false) {
+    /* Create directory if does not exist. */
+    await fs.promises.mkdir(path.dirname(shaOut), { recursive: true });
+
+    /* Download SHASUM text file. */
+    await request(shaUrl, shaOut);
+  }
+
+  /* Read SHASUM text file */
+  const shasum = await fs.promises.readFile(shaOut, { encoding: 'utf-8' });
+  const shasums = shasum.trim().split('\n');
+  for await (const line of shasums) {
+    const [storedSha, filePath] = line.split('  ');
+    const relativeFilePath = path.resolve(cacheDir, filePath);
+    const relativefilePathExists = await util.fileExists(relativeFilePath);
+    if (relativefilePathExists) {
+      const fileBuffer = await fs.promises.readFile(relativeFilePath);
+      const hash = crypto.createHash('sha256');
+      hash.update(fileBuffer);
+      const generatedSha = hash.digest('hex');
+      if (storedSha !== generatedSha) {
+        throw new Error('SHA256 checksums do not match.');
+      }
+    }
+  }
+
+  return true;
+}

package/src/decompress.test.js

@@ -1,55 +0,0 @@
-import fs from "node:fs";
-import path from "node:path";
-import process from "node:process";
-
-import { afterAll, beforeAll, describe, expect, it } from "vitest";
-
-import * as nw from "../src/index.js";
-import decompress from "./decompress.js";
-import util from './util.js';
-
-describe("get/decompress", async function () {
-
-  let nwFilePath = '';
-  let nwDirPath = '';
-  let nwOutPath = "./test/fixture/cache";
-
-  afterAll(async function () {
-    await fs.promises.rm(nwOutPath, { recursive: true, force: true });
-  });
-
-  beforeAll(async function () {
-    nwDirPath = await nw.findpath('all', { flavor: 'sdk' });
-
-    const cacheExists = await util.fileExists(nwOutPath)
-    if (!cacheExists) {
-      await fs.promises.mkdir(nwOutPath);
-    }
-
-    if (process.platform === 'linux') {
-      nwFilePath = nwDirPath + '.tar.gz';
-    } else {
-      nwFilePath = nwDirPath + '.zip';
-    }
-  });
-
-  it("decompresses a NW.js binary", async function () {
-    await decompress(nwFilePath, nwOutPath);
-  }, Infinity);
-
-  it.runIf(process.platform === 'darwin')("preserves symlinks on macos", async function () {
-    const frameworksPath = path.resolve(process.cwd(), nwOutPath, nwDirPath, "nwjs.app", "Contents", "Frameworks", "nwjs Framework.framework");
-    const symlinks = [
-      path.join(frameworksPath, "Helpers"),
-      path.join(frameworksPath, "Libraries"),
-      path.join(frameworksPath, "nwjs Framework"),
-      path.join(frameworksPath, "Resources"),
-      path.join(frameworksPath, "Versions", "Current"),
-    ];
-
-    for (const symlink of symlinks) {
-      const stats = await fs.promises.lstat(symlink);
-      expect(stats.isSymbolicLink()).toEqual(true);
-    }
-  });
-});

package/src/ffmpeg.test.js

@@ -1,31 +0,0 @@
-import fs from "node:fs";
-import process from "node:process";
-
-import { afterEach, beforeAll, describe, expect, it } from "vitest";
-
-import ffmpeg from "./ffmpeg.js";
-import util from "./util.js";
-
-describe("get/ffmpeg", function () {
-
-  let ffmpegFile = '';
-
-  afterEach(function () {
-    fs.promises.rm(ffmpegFile, { recursive: true, force: true });
-  });
-
-  beforeAll(async function () {
-    await fs.promises.mkdir("./test/fixture", { recursive: true });
-  });
-
-  it("downloades community prebuild FFmpeg for specifc platform", async function () {
-    ffmpegFile = await ffmpeg(
-      "https://github.com/nwjs-ffmpeg-prebuilt/nwjs-ffmpeg-prebuilt/releases/download",
-      "0.83.0",
-      util.PLATFORM_KV[process.platform],
-      util.ARCH_KV[process.arch],
-      "./test/fixture"
-    );
-    expect(util.fileExists(ffmpegFile)).resolves.toBe(true);
-  }, Infinity);
-});

package/src/node.test.js

@@ -1,24 +0,0 @@
-import fs from "node:fs";
-
-import { afterEach, describe, expect, it } from "vitest";
-
-import node from "./node.js";
-import util from "./util.js";
-
-describe("get/node", function () {
-
-  let nodeFile = '';
-
-  afterEach(function () {
-    fs.promises.rm(nodeFile, { recursive: true, force: true });
-  });
-
-  it("downloades Node headers", async function () {
-    nodeFile = await node(
-      "https://dl.nwjs.io",
-      "0.83.0",
-      "./test/fixture"
-    );
-    expect(util.fileExists(nodeFile)).resolves.toBe(true);
-  }, Infinity);
-});

package/src/nw.test.js

@@ -1,28 +0,0 @@
-import fs from "node:fs";
-import process from "node:process";
-
-import { afterEach, describe, expect, it } from "vitest";
-
-import nw from "./nw.js";
-import util from "./util.js";
-
-describe("get/nw", function () {
-
-  let nwFile = '';
-
-  afterEach(function () {
-    fs.promises.rm(nwFile, { recursive: true, force: true });
-  });
-
-  it("downloades a NW.js Linux tarball or Windows/MacOS zip", async function () {
-    nwFile = await nw(
-      "https://dl.nwjs.io",
-      "0.83.0",
-      "sdk",
-      util.PLATFORM_KV[process.platform],
-      util.ARCH_KV[process.arch],
-      "./test/fixture"
-    );
-    expect(util.fileExists(nwFile)).resolves.toBe(true);
-  }, Infinity);
-});

package/src/request.test.js

@@ -1,15 +0,0 @@
-import { describe, expect, it } from "vitest";
-
-import request from "./request.js";
-import util from "./util.js";
-
-describe.skip("get/request", function () {
-
-  let url = "https://raw.githubusercontent.com/nwutils/nw-builder/main/src/util/osx.arm.versions.json"
-  const filePath = "./test/fixture/cache/request.test.json";
-
-  it("downloads from specific url", async function () {
-    await request(url, filePath);
-    expect(util.fileExists(filePath)).resolves.toBe(true);
-  });
-}, Infinity);