New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

@code-pushup/core

Package Overview
Dependencies
Maintainers
3
Versions
253
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@code-pushup/core

Core business logic for the used by the Code PushUp CLI

Source
npmnpm
Version
0.126.1
Version published
Weekly downloads
4.2K
-29.68%
Maintainers
3
Weekly downloads
Ā 
Created
Source

@code-pushup/core

npm downloads dependencies

šŸ”ŽšŸ”¬ Quality metrics for your software project. šŸ“‰šŸ”

  • āš™ļø Configure what you want to track using your favourite tools.
  • šŸ¤– Integrate it in your CI.
  • 🌈 Visualize reports in a beautiful dashboard.

This package contains the core business logic for the Code PushUp CLI.

For most use cases, you'll probably want to use the @code-pushup/cli package instead. The core package is useful if you prefer programmatic usage (avoids going through the command line).

Setup

npm install --save-dev @code-pushup/core
yarn add --dev @code-pushup/core
pnpm add --save-dev @code-pushup/core

Usage

import { collect } from '@code-pushup/core';

const report = await collect({
  // ...
});

Keywords

CLI

FAQs

Package last updated on 31 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts