
Security News
Package Maintainers Call for Improvements to GitHub’s New npm Security Plan
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
@haiilo/license-check
Advanced tools
Easily check the npm dependencies of your Haiilo project against the [Blue Oak License List](https://blueoakcouncil.org/list). Dependencies in the `@coyoapp` or `@haiilo` scope are automatically ignored. Additional dependencies can be ignored using the `-
Easily check the npm dependencies of your Haiilo project against the
Blue Oak License List. Dependencies in the
@coyoapp
or @haiilo
scope are automatically ignored. Additional dependencies
can be ignored using the --exclude
or --excludeAll
options.
Note that this package is published publicly on npmjs.com
to allow for easier
execution via npx
.
Simply use npx
to execute the binary.
$ npx @haiilo/license-check
Note that npx
will ask to install @haiilo/license-check
upon first execution.
If you want to run the license check as part of your CI, use --yes
to suppress
this prompt and avoid dead locks in your pipeline.
"scripts": {
"license": "npx --yes @haiilo/license-check"
}
--exclude [file]
exclude modules listed in the specified whitelist file.
Example --exclude license-whitelist
, where the file lists allowed modules as
one module per line.--excludeAll [list]
exclude modules which names start with the
comma-separated list from the output (useful for excluding modules from a
specific vendor and such). Example: --excludeAll "@types;@babel"
. Note that
@coyoapp
or @haiilo
scope are automatically ignored.For each new commit added to the main
branch with git push or by merging a pull request or merging from another branch, a CI build is triggered and runs the semantic-release command to make a release if there are codebase changes since the last release that affect the package functionalities.
The table below shows which commit message gets you which release type when semantic-release
runs:
Commit message | Release type |
---|---|
fix(pencil): stop graphite breaking when too much pressure applied | |
feat(pencil): add 'graphiteWidth' option | |
perf(pencil): remove graphiteWidth option BREAKING CHANGE: The graphiteWidth option has been removed. The default graphite width of 10mm is always used for performance reasons. | (Note that the BREAKING CHANGE: token must be in the footer of the commit) |
FAQs
Easily check the npm dependencies of your Haiilo project against the [Blue Oak License List](https://blueoakcouncil.org/list). Dependencies in the `@coyoapp` or `@haiilo` scope are automatically ignored. Additional dependencies can be ignored using the `-
We found that @haiilo/license-check demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maintainers back GitHub’s npm security overhaul but raise concerns about CI/CD workflows, enterprise support, and token management.
Product
Socket Firewall is a free tool that blocks malicious packages at install time, giving developers proactive protection against rising supply chain attacks.
Research
Socket uncovers malicious Rust crates impersonating fast_log to steal Solana and Ethereum wallet keys from source code.