
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@haiilo/license-check
Advanced tools
Easily check the npm dependencies of your Haiilo project against the [Blue Oak License List](https://blueoakcouncil.org/list). Dependencies in the `@coyoapp` or `@haiilo` scope are automatically ignored. Additional dependencies can be ignored using the `-
Easily check the npm dependencies of your Haiilo project against the
Blue Oak License List. Dependencies in the
@coyoapp
or @haiilo
scope are automatically ignored. Additional dependencies
can be ignored using the --exclude
or --excludeAll
options.
Note that this package is published publicly on npmjs.com
to allow for easier
execution via npx
.
Simply use npx
to execute the binary.
$ npx @haiilo/license-check
Note that npx
will ask to install @haiilo/license-check
upon first execution.
If you want to run the license check as part of your CI, use --yes
to suppress
this prompt and avoid dead locks in your pipeline.
"scripts": {
"license": "npx --yes @haiilo/license-check"
}
--exclude [file]
exclude modules listed in the specified whitelist file.
Example --exclude license-whitelist
, where the file lists allowed modules as
one module per line.--excludeAll [list]
exclude modules which names start with the
comma-separated list from the output (useful for excluding modules from a
specific vendor and such). Example: --excludeAll "@types;@babel"
. Note that
@coyoapp
or @haiilo
scope are automatically ignored.For each new commit added to the main
branch with git push or by merging a pull request or merging from another branch, a CI build is triggered and runs the semantic-release command to make a release if there are codebase changes since the last release that affect the package functionalities.
The table below shows which commit message gets you which release type when semantic-release
runs:
Commit message | Release type |
---|---|
fix(pencil): stop graphite breaking when too much pressure applied | |
feat(pencil): add 'graphiteWidth' option | |
perf(pencil): remove graphiteWidth option BREAKING CHANGE: The graphiteWidth option has been removed. The default graphite width of 10mm is always used for performance reasons. | (Note that the BREAKING CHANGE: token must be in the footer of the commit) |
FAQs
Easily check the npm dependencies of your Haiilo project against the [Blue Oak License List](https://blueoakcouncil.org/list). Dependencies in the `@coyoapp` or `@haiilo` scope are automatically ignored. Additional dependencies can be ignored using the `-
We found that @haiilo/license-check demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.