New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details → →
Socket
Book a DemoSign in
Socket

@code-pushup/cli

Package Overview
Dependencies
Maintainers
3
Versions
254
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@code-pushup/cli

A CLI to run all kinds of code quality measurements to align your team with company goals

latest
Source
npmnpm
Version
0.126.2
Version published
Weekly downloads
5.9K
-20%
Maintainers
3
Weekly downloads
Ā 
Created
Source

@code-pushup/cli

npm downloads dependencies

šŸ”ŽšŸ”¬ Quality metrics for your software project. šŸ“‰šŸ”

  • āš™ļø Configure what you want to track using your favourite tools.
  • šŸ¤– Integrate it in your CI.
  • 🌈 Visualize reports in a beautiful dashboard.
šŸ“Š Getting Started🌐 Portal IntegrationšŸ› ļø CI Automation
How to setup a basic projectSort, filter your goalsUpdates on every PR
Getting started cover imagePortal integration cover imageCI Automation cover

The Code PushUp CLI serves to collect audit results, and optionally upload the report to the Code PushUp portal.

It can be used locally in your repository, or integrated in your CI environment.

If you're looking for programmatic usage, then refer to the underlying @code-pushup/core package instead.

Getting started

  • Install as a dev dependency with your package manager:

    Installation command for npm, yarn and pnpm
    npm install --save-dev @code-pushup/cli
    
    yarn add --dev @code-pushup/cli
    
    pnpm add --save-dev @code-pushup/cli
    
  • Create a code-pushup.config.ts configuration file (.js or .mjs extensions are also supported).

    import type { CoreConfig } from '@code-pushup/models';
    
    const config: CoreConfig = {
      plugins: [
        // ...
      ],
    };
    
    export default config;
    
  • Add plugins as per your project needs (e.g. @code-pushup/eslint-plugin or @code-pushup/coverage-plugin).

    npm install --save-dev @code-pushup/eslint-plugin
    
    import eslintPlugin from '@code-pushup/eslint-plugin';
    import type { CoreConfig } from '@code-pushup/models';
    
    const config: CoreConfig = {
      // ...
      plugins: [
        // ...
        await eslintPlugin({ eslintrc: '.eslintrc.js', patterns: ['src/**/*.js'] }),
      ],
    };
    
    export default config;
    
  • Run the CLI with npx code-pushup (see --help for list of commands and arguments).

  • View report file(s) in output directory (specified by persist.outputDir configuration).
    This folder should be ignored in your .gitignore.

Set up categories (optional)

  • Define your custom categories.

    const config: CoreConfig = {
      // ...
      categories: [
        {
          slug: 'performance',
          title: 'Performance',
          refs: [
            // reference to an existing audit or group from plugins
            {
              type: 'audit',
              plugin: 'eslint',
              slug: 'react-jsx-key',
              weight: 1,
            },
            // ...
          ],
        },
        // ...
      ],
    };
    
  • Run the CLI with npx code-pushup.

  • View report file(s) including category section in output directory.

Portal integration

If you have access to the Code PushUp portal, you can enable report uploads by installing the @code-pushup/portal-client package.

Installation command for npm, yarn and pnpm
npm install --save-dev @code-pushup/portal-client
yarn add --dev @code-pushup/portal-client
pnpm add --save-dev @code-pushup/portal-client

Once the package is installed, update your configuration file to include your portal credentials:

const config: CoreConfig = {
  // ...
  upload: {
    server: 'https://ip-or-domain/path/to/portal/api/graphql',
    apiKey: process.env.PORTAL_API_KEY,
    organization: 'my-org',
    project: 'my-project',
  },
};

šŸ›  CI automation

Example for GitHub Actions:

name: Code PushUp

on: push

jobs:
  collect-and-upload:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: actions/setup-node@v4
      - run: npm ci
      - run: npx code-pushup autorun --upload.apiKey=${{ secrets.PORTAL_API_KEY }}

Configuration

For a comprehensive list of all options available in the config file, refer to CoreConfig docs.

The default locations for the config file are code-pushup.config.ts, code-pushup.config.mjs or code-pushup.config.js. Other locations require using the --config=<path> CLI option.

If your config file relies on some custom TypeScript project configuration - e.g. import aliases via compilerOptions.paths (common in Nx) - you can use the --tsconfig=<path> CLI option.

Custom Plugins

We provide comprehensive documentation on how to create a custom plugin.

The repository also maintains a set of plugin examples showcasing different scenarios.
Each example is fully tested to demonstrate best practices for plugin testing as well.

Example for custom plugins:

  • šŸ“ File Size - example of basic runner executor
  • šŸ“¦ Package Json - example of audits and groups
  • šŸ”„ Lighthouse (official implementation here) - example of a basic command executor

CLI commands and options

Global Options

OptionTypeDefaultDescription
--verbosebooleanprocess.env['CP_VERBOSE'] if set, otherwise falseToggles whether to print debug logs.
--configstringlooks for code-pushup.config.{ts|mjs|js}Path to config file.
--tsconfigstringn/aPath to a TypeScript config, used to load config file.

[!NOTE]
By default, the CLI loads code-pushup.config.(ts|mjs|js) if no config path is provided with --config.

Common Command Options

Global Options

OptionTypeDefaultDescription
--onlyPluginsstring[][]Only run the specified plugins. Applicable to all commands except upload.
--skipPluginsstring[][]Skip the specified plugins. Applicable to all commands except upload.
--onlyCategoriesstring[][]Only run the specified categories. Applicable to all commands except upload.
--skipCategoriesstring[][]Skip the specified categories. Applicable to all commands except upload.

Cache Options

OptionTypeDefaultDescription
--cachebooleanfalseCache runner outputs (both read and write).
--cache.readbooleanfalseIf plugin audit outputs should be read from file system cache.
--cache.writebooleanfalseIf plugin audit outputs should be written to file system cache.

Persist Options

OptionTypeDefaultDescription
--persist.outputDirstringn/aDirectory for the produced reports.
--persist.filenamestringreportFilename for the produced reports without extension.
--persist.format('json' | 'md')[]jsonFormat(s) of the report file.
--persist.skipReportsbooleanfalseSkip generating report files. (useful in combination with caching)

Upload Options

OptionTypeDefaultDescription
--upload.organizationstringn/aOrganization slug from portal.
--upload.projectstringn/aProject slug from portal.
--upload.serverstringn/aURL to your portal server.
--upload.apiKeystringn/aAPI key for the portal server.

[!NOTE]
All common options, except --onlyPlugins and --skipPlugins, can be specified in the configuration file as well. CLI arguments take precedence over configuration file options.

[!NOTE]
The --upload.* group of options is applicable to all commands except collect.

Commands

collect command

example of code-pushup terminal output

Usage: code-pushup collect [options]

Description: The command initializes and executes the necessary plugins and collects the results. Based on the results it generates a comprehensive report.

Refer to the Common Command Options for the list of available options.

upload command

Usage: code-pushup upload [options]

Description: Upload reports to the Code PushUp portal.

Refer to the Common Command Options for the list of available options.

autorun command

Usage: code-pushup autorun [options]

Description: Run plugins, collect results and upload the report to the Code PushUp portal.

Refer to the Common Command Options for the list of available options.

history command

Usage: code-pushup history

Description: Run plugins, collect results and upload the report to the Code PushUp portal for a specified number of commits.

Refer to the Common Command Options for the list of available options.

OptionTypeDefaultDescription
--targetBranchstring'main'Branch to crawl history.
--forceCleanStatusbooleanfalseIf we reset the status to a clean git history forcefully or not.
--maxCountnumber5Number of commits.
--skipUploadsbooleanfalseUpload created reports
--fromstringn/aHash to start in history
--tostringn/aHash to end in history

compare command

Usage: code-pushup compare --before SOURCE_PATH --after TARGET_PATH [options]

Description: Compare 2 reports and produce a report diff file.

In addition to the Common Command Options, the following options are recognized by the compare command:

OptionTypeDefaultDescription
--beforestring.code-pushup/report-before.json 1Path to source report.json.
--afterstring.code-pushup/report-after.json 1Path to target report.json.
--labelstringn/a 2Label for diff (e.g. project name).

print-config command

Usage: code-pushup print-config [options]

Description: Print the resolved configuration.

In addition to the Common Command Options, the following options are recognized by the print-config command:

OptionRequiredTypeDescription
--outputyesstringPath to output file to print config.

merge-diffs command

Usage: code-pushup merge-diffs --files PATH_1 PATH_2 ... [options]

Description: Combine multiple report diffs into a single report-diff.md.

In addition to the Common Command Options, the following options are recognized by the merge-diffs command:

OptionRequiredTypeDescription
--filesyesstring[]List of report-diff.json paths.

Caching

The CLI supports caching to speed up subsequent runs and is compatible with Nx and Turborepo.

Depending on your strategy, you can cache the generated reports files or plugin runner output. For fine-grained caching, we suggest caching plugin runner output.

The detailed example for Nx caching and Turborepo caching is available in the docs.

Footnotes

  • Uses persist config to determine report paths, so default file paths are actually ${persist.outputDir}/${persist.filename}-before.json and ${persist.outputDir}/${persist.filename}-after.json. ↩ ↩2

  • Uses label from input report.json files is they both have the same value. ↩

Keywords

CLI

FAQs

Package last updated on 31 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts