Merge pull request #17 from vajahath/v2.5.0-security

v2.5.0 security update

Author: vajahath

.github/workflows/Build.yml

@@ -0,0 +1,23 @@
+name: Build
+
+on: [push, pull_request]
+
+jobs:
+ Build:
+ strategy:
+ matrix:
+ os: [ubuntu-latest]
+ node: ['8', '10', '12', '13']
+ runs-on: ${{ matrix.os }}
+ name: build and test (${{ matrix.os }}|node-${{ matrix.node }})
+
+ steps:
+ - uses: actions/checkout@v1
+ - uses: actions/setup-node@v1.2.0
+ with:
+ node-version: ${{ matrix.node }}
+ - run: node --version
+ - run: npm ci
+ - run: npm run lint
+ - run: npm run build
+ - run: npm test

.github/workflows/Deploy.yml

@@ -0,0 +1,40 @@
+name: Deploy
+
+on:
+ release:
+ types: published
+
+jobs:
+ Deploy-To-NPM:
+ runs-on: ubuntu-latest
+ name: Deploy to NPM
+
+ steps:
+ - uses: actions/checkout@v1
+ - uses: actions/setup-node@v1.2.0
+ with:
+ node-version: '12'
+ registry-url: 'https://registry.npmjs.org'
+ - run: node --version
+ - run: npm ci
+ - run: npm run lint
+ - run: ls && npm publish --access=public
+ env:
+ NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
+
+ Deploy-To-GitHub-Package-Registry:
+ runs-on: ubuntu-latest
+ name: Deploy to GPR
+ steps:
+ - uses: actions/checkout@v1
+ - uses: actions/setup-node@v1.2.0
+ with:
+ node-version: '12'
+ registry-url: 'https://npm.pkg.github.com'
+ - run: node --version
+ - run: npm ci
+ - run: npm run lint
+ - run: npm run rescope vajahath
+ - run: ls && npm publish
+ env:
+ NODE_AUTH_TOKEN: ${{ secrets.GH_TOKEN }}

.travis.yml

@@ -3,9 +3,8 @@
 Yet another SQL query builder.
 
 [![npm](https://img.shields.io/npm/v/sqlify.svg)](https://www.npmjs.com/package/sqlify)
-[![Build Status](https://travis-ci.org/vajahath/sqlify.svg?branch=master)](https://travis-ci.org/vajahath/sqlify)
+![Build Status](https://github.com/vajahath/sqlify/workflows/Build/badge.svg) 
 [![T](https://img.shields.io/badge/TypeScript%20Ready-.d.ts%20included-blue.svg)]()
-[![Gitter chat](https://badges.gitter.im/npm-sqlify/gitter.png)](https://gitter.im/npm-sqlify/Lobby)
 [![npm](https://img.shields.io/npm/dt/sqlify.svg)](https://www.npmjs.com/package/sqlify)
 
 > There are many sql query builders out there. But this one makes more sense to me :wink:.
@@ -20,7 +19,7 @@ npm install --save sqlify
 
 ## Why
 
-* This package is a wrapper around [squel](https://hiddentao.com/squel) module to make it more friendly.
+* This package is a wrapper around [squel](https://hiddentao.com/squel) module to make it more friendly. (Check that package to know its maintenance status)
 * Helps you to build dynamic sql queries.
 * **Example use case:** suppose, you are getting a POST request to insert some data to your SQL database.
  You'll get the data in `req.body` as `{name: "Swat", age: 22, address: "ND"}`.
@@ -37,6 +36,8 @@ npm install --save sqlify
  sqlify(chain, resource); // done!
  ```
 
+> Warning ⚠️: Do not ever pass queries generated on the client side to your web server for execution. The above example is only a use case. Do NOT copy paste as such.
+
 ## Examples
 
 #### SELECT
@@ -267,6 +268,8 @@ The following fields can be used inside the `resource` object. Logic behind the
 
 ## Change log
 
+* v2.5.0
+ * Security Update
 * v2.4.0
  * TypeScript support and definitions
  * Better docs

README.md

@@ -1,11 +1,13 @@
 import * as del from 'del';
 import * as gulp from 'gulp';
 
-// copy assets files from src to dist
-gulp.task('copy-assets', () => {
+async function cleanBuild() {
+return await del(['dist/**/*', 'dist/**/.*']);
+}
+
+function copyAssets() {
 return gulp.src(['src/**/*', '!src/**/*.ts']).pipe(gulp.dest('dist/'));
-});
+}
 
-gulp.task('clean-build', () => {
-return del.sync(['dist/**/*', 'dist/**/.*']);
-});
+exports['clean-build'] = cleanBuild;
+exports['copy-assets'] = copyAssets;