mirror of
https://github.com/angular/angular
synced 2026-05-24 09:28:37 +00:00
Currently, the exec() utility uses childProcess.spawn() with shell: true. This commit changes the spawn option to shell: false to prevent OS command injection vulnerabilities and quotes the benchmark target in the github action.
(cherry picked from commit
|
||
|---|---|---|
| .. | ||
| index.mts | ||
| README.md | ||
| results.mts | ||
| targets.mts | ||
| utils.mts | ||
Benchmarks script
This folder contains a convenience script for running benchmarks and performing comparisons. It can
be run via pnpm benchmarks. See command line help for possible commands.
The benchmark script is used in conjunction with the benchmark compare GitHub actions workflow, allowing organization members to initiate a benchmark comparison via a GitHub comment in a PR.