web-artifacts-builder

The script destructively deletes the 'dist' and 'bundle.html' directories/files without any user confirmation or warning. In an automated or CI/CD context, or if a user runs this script unexpectedly, legitimate work could be lost. The lack of confirmation before destructive operations is a dangerous practice.

fix Add user confirmation before deletion with a prompt like: `read -p 'This will delete dist/ and bundle.html. Continue? (y/n) ' -n 1 -r && echo && [[ $REPLY =~ ^[Yy]$ ]] || exit 1` before the `rm -rf` commands. Alternatively, back up files to a timestamped directory before deletion, or use a dry-run mode that shows what would be deleted.

The script automatically installs pnpm globally without user consent or confirmation. This is dangerous because it modifies the system-wide environment without explicit authorization, potentially conflicts with existing pnpm installations, and could be exploited if the script is injected or modified. Users executing this script may not expect or want a global package manager installed.

fix Add explicit user confirmation before installing pnpm globally. Use interactive prompts like 'read -p "Install pnpm globally? (y/n) "' before executing npm install -g pnpm. Alternatively, provide documentation for manual installation or use a local pnpm installation approach.

The script overwrites multiple configuration files (index.html, postcss.config.js, tailwind.config.js, src/index.css, tsconfig.json, vite.config.ts, components.json) without user disclosure or confirmation of what will be modified. If a project already exists with these files, this silent overwriting could destroy user data and existing configurations. Users are not informed about destructive operations being performed.

fix Add explicit checks and user prompts before overwriting existing files. Use conditional writes with confirmation: 'if [ -f file.txt ]; then read -p "Overwrite existing file? (y/n) "'. Alternatively, create backups of existing files before modification and clearly log all file operations to the user. Document which files will be created or modified upfront.