ripencli 1.1.1 → 1.2.1

package/README.md

@@ -1,22 +1,20 @@
 # ripen
 
-> Interactive dependency updater for npm, pnpm, yarn, and bun
+> Security-first interactive dependency updater for npm, pnpm, yarn, and bun
 
 ![npm version](https://img.shields.io/npm/v/ripencli) ![node](https://img.shields.io/node/v/ripencli) ![GitHub License](https://img.shields.io/github/license/yusifaliyevpro/ripen)
 
-
 ![ripen banner](https://raw.githubusercontent.com/yusifaliyevpro/ripen/main/docs/public/og.svg)
 
-
 ## Features
 
+- **Security first** — ripen never executes commands. Everything goes to your clipboard; you review and run it yourself
 - **Interactive TUI** — navigate packages with arrow keys, select with space
-- **Clipboard-first** — copies the ready-to-run update command to your clipboard, nothing is executed for you
-- **Publish age** — shows how long ago the latest version was published (yellow if < 1 day, useful for pnpm's `minimumReleaseAge`)
+- **Publish age** — shows how long ago the latest version was published (yellow if < 1 day, useful for spotting freshly published packages before trusting them)
 - **Version picker** — choose any specific version from the npm registry, not just latest
 - **Changelog viewer** — see GitHub release notes before you update
 - **npm, pnpm, yarn & bun** — auto-detects your package manager
-- **Global packages** — check global installs across all* package managers
+- **Global packages** — check global installs across all\* package managers
 - **Show all packages** — `ripen --all` lists every dependency, not just outdated ones (great for checking changelogs or downgrading)
 - **Self-update** — notifies you when a new version of ripen is available
 - **Major bump warnings** — highlights potentially breaking updates
@@ -56,18 +54,18 @@ ripen --help
 
 ## Controls
 
-| Key          | Action                              |
-| ------------ | ----------------------------------- |
-| `↑ ↓`        | Navigate packages                   |
-| `PgUp PgDn`  | Scroll a full page                  |
-| `Tab`        | Jump between groups                 |
-| `← →`        | Collapse / expand scope groups      |
-| `space`      | Toggle select                       |
-| `v`          | Pick specific version               |
-| `c`          | View changelog / release notes      |
-| `enter`      | Copy update command & exit          |
-| `s`          | Open settings                       |
-| `esc`        | Cancel / go back                    |
+| Key         | Action                         |
+| ----------- | ------------------------------ |
+| `↑ ↓`       | Navigate packages              |
+| `PgUp PgDn` | Scroll a full page             |
+| `Tab`       | Jump between groups            |
+| `← →`       | Collapse / expand scope groups |
+| `space`     | Toggle select                  |
+| `v`         | Pick specific version          |
+| `c`         | View changelog / release notes |
+| `enter`     | Copy update command & exit     |
+| `s`         | Open settings                  |
+| `esc`       | Cancel / go back               |
 
 ## How it works
 
@@ -82,13 +80,14 @@ ripen --help
 
 Press `s` to open the settings screen. Settings are persisted at `~/.config/ripen/config.json`.
 
-| Setting                      | Default | Description                                                  |
-| ---------------------------- | ------- | ------------------------------------------------------------ |
-| Sort by update frequency     | Off     | Packages you update often appear at the top                  |
-| Separate dev dependencies    | On      | Show dependencies and devDependencies in separate groups     |
-| Enable scope grouping        | Off     | Group scoped packages under their scope prefix               |
-| Show grouped scopes on top   | Off     | Grouped scopes appear before ungrouped packages              |
-| Grouped scopes               | —       | List of scopes to group (e.g. `@heroui`, `@radix-ui`)       |
+| Setting                    | Default | Description                                                                                          |
+| -------------------------- | ------- | ---------------------------------------------------------------------------------------------------- |
+| Sort by update frequency   | Off     | Packages you update often appear at the top                                                          |
+| Separate dev dependencies  | On      | Show dependencies and devDependencies in separate groups                                             |
+| Enable scope grouping      | Off     | Group scoped packages under their scope prefix                                                       |
+| Show grouped scopes on top | Off     | Grouped scopes appear before ungrouped packages                                                      |
+| Grouped scopes             | —       | List of scopes to group (e.g. `@heroui`, `@radix-ui`)                                                |
+| SFW Firewall               | Off     | Prepend `sfw` before every generated command (requires [sfw](https://github.com/nicolo-ribaudo/sfw)) |
 
 When using `ripen -g`, all available package managers (npm, pnpm, yarn) are checked in parallel so you see every global package in one place. Bun is not included in global checking because it doesn't provide a JSON output for its outdated command.
 

package/dist/cli.js

@@ -573,7 +573,7 @@ function parseYarnOutdated(raw, global) {
 }
 //#endregion
 //#region src/executor.ts
-function buildUpdateCommands(manager, packages, global = false) {
+function buildUpdateCommands(manager, packages, global = false, sfwFirewall = false) {
 	const commands = [];
 	const deps = packages.filter((p) => !global && p.type === "dependencies");
 	const devDeps = packages.filter((p) => !global && p.type === "devDependencies");
@@ -583,7 +583,7 @@ function buildUpdateCommands(manager, packages, global = false) {
 			const version = pkg.targetVersion ?? pkg.latest;
 			return `${pkg.name}@${version}`;
 		});
-		return `${mgr} ${(mgr === "yarn" && global ? [
+		const cmd = `${mgr} ${(mgr === "yarn" && global ? [
 			"global",
 			"add",
 			...pkgArgs
@@ -592,6 +592,7 @@ function buildUpdateCommands(manager, packages, global = false) {
 			...flags,
 			...pkgArgs
 		]).join(" ")}`;
+		return sfwFirewall ? `sfw ${cmd}` : cmd;
 	};
 	if (deps.length > 0) commands.push(makeCmd(manager, deps, []));
 	if (devDeps.length > 0) commands.push(makeCmd(manager, devDeps, [manager === "bun" ? "-d" : "-D"]));
@@ -616,7 +617,8 @@ const DEFAULT_CONFIG = {
 	groupScopes: [],
 	groupsOnTop: false,
 	frequencySort: false,
-	separateDevDeps: true
+	separateDevDeps: true,
+	sfwFirewall: false
 };
 const CONFIG_DIR = join(homedir(), ".config", "ripen");
 const CONFIG_PATH = join(CONFIG_DIR, "config.json");
@@ -1977,6 +1979,7 @@ function Settings({ config, onConfigChange, onClose }) {
 		{ type: "toggle-separate-dev" },
 		{ type: "toggle-group" },
 		{ type: "toggle-groups-top" },
+		{ type: "toggle-sfw" },
 		{ type: "list-header" },
 		...scopes.map((_, i) => ({
 			type: "list-item",
@@ -2039,6 +2042,10 @@ function Settings({ config, onConfigChange, onClose }) {
 				...config,
 				groupsOnTop: !config.groupsOnTop
 			});
+			else if (currentRow?.type === "toggle-sfw") onConfigChange({
+				...config,
+				sfwFirewall: !config.sfwFirewall
+			});
 			else if (currentRow?.type === "list-header") {
 				setInputMode(true);
 				setInputValue("");
@@ -2100,6 +2107,12 @@ function Settings({ config, onConfigChange, onClose }) {
 				focused: currentRow?.type === "toggle-groups-top",
 				disabled: !config.groupByScope
 			}),
+			/* @__PURE__ */ jsx(SettingsToggle, {
+				label: "SFW firewall",
+				description: "Prepend \"sfw\" before every generated install command",
+				checked: config.sfwFirewall,
+				focused: currentRow?.type === "toggle-sfw"
+			}),
 			/* @__PURE__ */ jsxs(Box, {
 				flexDirection: "column",
 				marginBottom: 1,
@@ -2129,7 +2142,7 @@ function Settings({ config, onConfigChange, onClose }) {
 						})]
 					}),
 					scopes.map((scope, i) => {
-						const itemFocused = flatCursor === 5 + i;
+						const itemFocused = flatCursor === 6 + i;
 						return /* @__PURE__ */ jsxs(Box, {
 							marginLeft: 4,
 							gap: 1,
@@ -2448,7 +2461,8 @@ function App({ project, global, showAll, version, installManager, onCancelled, o
 		setScreen(selfUpdate.hasUpdate ? "self-update" : "loading");
 	}, [selfUpdate.checkComplete]);
 	const handleSelfUpdate = () => {
-		const cmd = selfUpdate.buildUpdateCommand();
+		const raw = selfUpdate.buildUpdateCommand();
+		const cmd = config.sfwFirewall ? `sfw ${raw}` : raw;
 		copyToClipboard(cmd);
 		onCopied?.([cmd]);
 		exit();
@@ -2480,7 +2494,7 @@ function App({ project, global, showAll, version, installManager, onCancelled, o
 	const handleConfirm = () => {
 		const selected = packages.filter((p) => p.selected);
 		if (selected.length === 0) return;
-		const commands = buildUpdateCommands(project.manager, selected, global);
+		const commands = buildUpdateCommands(project.manager, selected, global, config.sfwFirewall);
 		copyToClipboard(commands.join(" && "));
 		incrementFrequency(selected.map((p) => p.name));
 		setFrequency(loadFrequency());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ripencli",
-  "version": "1.1.1",
+  "version": "1.2.1",
   "description": "Interactive dependency updater for npm, pnpm, yarn, and bun",
   "license": "MIT",
   "author": {