
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@chiragrupani/package-install-cmd
Advanced tools
Lists the dependency and dev dependency in the project and generates commands to install them using npm
Read package.json file and generates npm install commands for installed packages. It generates seperate commands for dev dependency, dependency and types.
Available in NPM Registry
Installation
npm i -g @chiragrupani/package-install-cmd
Sample Output from Angular project:
[PIC] Generating commands ...
Dev Dependency:
npm i -D @angular-devkit/build-angular @angular/cli @angular/compiler-cli @angular/language-service codelyzer jasmine-core
jasmine-spec-reporter karma karma-chrome-launcher karma-coverage-istanbul-reporter karma-jasmine karma-jasmine-html-reporter protractor ts-node tslint typescript
npm i -D @types/node @types/jasmine @types/jasminewd2
Dependency:
npm i @angular/animations @angular/common @angular/compiler @angular/core @angular/forms @angular/platform-browser @angular/platform-browser-dynamic @angular/router core-js rxjs tslib zone.js
Done!
Usage as CLI:
Use Command
# Navigate to folder containing package.json and execute below command:
pic
Get version details along with packages
# Navigate to folder containing package.json and execute below command:
pic --withversion
OR
# Navigate to folder containing package.json and execute below command:
pic -wv
Usage as Library:
import {
Commands,
DependencyType,
PackageFileReader
} from 'package-install-cmd';
PackageFileReader.GetInstallCommands()
.then((alldependency: Commands[]) => {
PackageFileReader.DisplayDependency(alldependency);
})
.catch(error => {
console.error(error.message);
});
In case if you want to build package from github source
# Clone the project
npm run build # Builds the project
npm pack # Generate package in tgz format
npm install -g <path/to/tgz> # Provide path to tgz file generated in earlier step
FAQs
Lists the dependency and dev dependency in the project and generates commands to install them using npm
The npm package @chiragrupani/package-install-cmd receives a total of 3 weekly downloads. As such, @chiragrupani/package-install-cmd popularity was classified as not popular.
We found that @chiragrupani/package-install-cmd demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.