
Research
/Security News
10 npm Typosquatted Packages Deploy Multi-Stage Credential Harvester
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.
@haiilo/license-check
Advanced tools
Easily check the npm dependencies of your Haiilo project against the [Blue Oak License List](https://blueoakcouncil.org/list). Dependencies in the `@coyoapp` or `@haiilo` scope are automatically ignored. Additional dependencies can be ignored using the `-
Easily check the npm dependencies of your Haiilo project against the
Blue Oak License List. Dependencies in the
@coyoapp or @haiilo scope are automatically ignored. Additional dependencies
can be ignored using the --exclude or --excludeAll options.
Note that this package is published publicly on npmjs.com to allow for easier
execution via npx.
Simply use npx to execute the binary.
$ npx @haiilo/license-check
Note that npx will ask to install @haiilo/license-check upon first execution.
If you want to run the license check as part of your CI, use --yes to suppress
this prompt and avoid dead locks in your pipeline.
"scripts": {
"license": "npx --yes @haiilo/license-check"
}
--exclude [file] exclude modules listed in the specified whitelist file.
Example --exclude license-whitelist, where the file lists allowed modules as
one module per line.--excludeAll [list] exclude modules which names start with the
comma-separated list from the output (useful for excluding modules from a
specific vendor and such). Example: --excludeAll "@types;@babel". Note that
@coyoapp or @haiilo scope are automatically ignored.For each new commit added to the main branch with git push or by merging a pull request or merging from another branch, a CI build is triggered and runs the semantic-release command to make a release if there are codebase changes since the last release that affect the package functionalities.
The table below shows which commit message gets you which release type when semantic-release runs:
| Commit message | Release type |
|---|---|
fix(pencil): stop graphite breaking when too much pressure applied | |
feat(pencil): add 'graphiteWidth' option | |
perf(pencil): remove graphiteWidth optionBREAKING CHANGE: The graphiteWidth option has been removed.The default graphite width of 10mm is always used for performance reasons. | (Note that the BREAKING CHANGE: token must be in the footer of the commit) |
FAQs
Easily check the npm dependencies of your Haiilo project against the [Blue Oak License List](https://blueoakcouncil.org/list). Dependencies in the `@coyoapp` or `@haiilo` scope are automatically ignored. Additional dependencies can be ignored using the `-
We found that @haiilo/license-check demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.

Product
Socket Firewall Enterprise is now available with flexible deployment, configurable policies, and expanded language support.

Security News
Open source dashboard CNAPulse tracks CVE Numbering Authorities’ publishing activity, highlighting trends and transparency across the CVE ecosystem.