Add production dependencies & build

fixes #52

.github/workflows/windows-tests.yml

@@ -1,44 +0,0 @@
-name: Windows Benchmark
-
-on: [push]
-
-jobs:
-  installer:
-    name: Installer
-    runs-on: windows-latest
-
-    steps:
-      - name: Download
-        run: curl -O https://julialang-s3.julialang.org/bin/winnt/x64/1.5/julia-1.5.3-win64.exe
-        shell: bash
-
-      - name: Install
-        run: |
-          Start-Process -FilePath julia-1.5.3-win64.exe -ArgumentList "/SILENT /dir=C:\Julia" -NoNewWindow -Wait
-      
-      - name: Add to path
-        run: |
-          echo "C:\Julia\bin" >> $GITHUB_PATH
-        shell: bash
-      
-      - run: julia --version
-  
-  archive:
-    name: Archive
-    runs-on: windows-latest
-
-    steps:
-      - name: Download
-        run: curl -O https://julialang-s3.julialang.org/bin/winnt/x64/1.5/julia-1.5.3-win64.zip
-        shell: bash
-
-      - name: Install
-        run: |
-          [System.IO.Compression.ZipFile]::ExtractToDirectory('julia-1.5.3-win64.zip', 'C:\Julia')
-      
-      - name: Add to path
-        run: |
-          echo "C:\Julia\julia-1.5.3\bin" >> $GITHUB_PATH
-        shell: bash
-      
-      - run: julia --version

.gitignore

@@ -1,3 +1,3 @@
 node_modules/
 __tests__/runner/*
-dist/
+!dist/

lib/installer.js

@@ -146,6 +146,10 @@ function getDownloadURL(fileInfo, version, arch) {
     if (version == 'nightly') {
         return `${baseURL}/${getNightlyFileName(arch)}`;
     }
+    // Verify that fileInfo.url points at the official Julia download servers
+    if (!fileInfo.url.startsWith('https://julialang-s3.julialang.org/')) {
+        throw new Error(`versions.json points at a download location outside of Julia's download server: ${fileInfo.url}. Aborting for security reasons.`);
+    }
     return fileInfo.url;
 }
 exports.getDownloadURL = getDownloadURL;

src/installer.ts

@@ -142,6 +142,10 @@ export function getDownloadURL(fileInfo, version: string, arch: string): string
         return `${baseURL}/${getNightlyFileName(arch)}`
     }
 
+    // Verify that fileInfo.url points at the official Julia download servers
+    if (!fileInfo.url.startsWith('https://julialang-s3.julialang.org/')) {
+        throw new Error(`versions.json points at a download location outside of Julia's download server: ${fileInfo.url}. Aborting for security reasons.`)
+    }
     return fileInfo.url
 }