tackl 1.0.6 → 1.0.7
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/bin/tackl.js +12 -2
- package/package.json +1 -1
package/bin/tackl.js
CHANGED
|
@@ -237,10 +237,20 @@ ${pc.bold('Repository:')} https://github.com/12-studio/tackl
|
|
|
237
237
|
process.env.HUSKY = '0';
|
|
238
238
|
|
|
239
239
|
execSync('npm install', { cwd: targetDir, stdio: 'inherit' });
|
|
240
|
-
|
|
240
|
+
|
|
241
241
|
// Restore environment
|
|
242
242
|
process.env = originalEnv;
|
|
243
|
-
|
|
243
|
+
|
|
244
|
+
// Try to fix audit issues automatically
|
|
245
|
+
try {
|
|
246
|
+
log.step('🔧 Fixing security vulnerabilities...');
|
|
247
|
+
execSync('npm audit fix', { cwd: targetDir, stdio: 'inherit' });
|
|
248
|
+
log.ok('Security vulnerabilities fixed!');
|
|
249
|
+
} catch (e) {
|
|
250
|
+
log.warn('Some vulnerabilities could not be automatically fixed.');
|
|
251
|
+
log.info('You can run "npm audit fix --force" manually if needed.');
|
|
252
|
+
}
|
|
253
|
+
|
|
244
254
|
log.ok('Dependencies installed successfully!');
|
|
245
255
|
} catch (e) {
|
|
246
256
|
log.warn(`Install failed: ${e.message}`);
|