@lyv/depwatch
Advanced tools
Comparing version 0.1.6 to 0.1.7
@@ -6,2 +6,3 @@ #!/usr/bin/env node | ||
{ name: 'command', type: String, defaultOption: true }, | ||
{ name: 'all', alias: 'a', type: Boolean }, | ||
{ name: 'node', alias: 'n', type: Boolean }, | ||
@@ -21,4 +22,7 @@ { name: 'pods', alias: 'p', type: Boolean }, | ||
break; | ||
case "update": | ||
require("./src/update")(options); | ||
break; | ||
default: | ||
break; | ||
} |
{ | ||
"name": "@lyv/depwatch", | ||
"version": "0.1.6", | ||
"version": "0.1.7", | ||
"keywords": ["node_modules", "pods", "dependencies", "libs"], | ||
@@ -13,3 +13,5 @@ "description": "Detects dependency changes so you know when you need to restore them", | ||
"gitignore": "node ./index gitignore", | ||
"check": "node ./index check -u" | ||
"check": "node ./index check -u", | ||
"update": "node ./index update -a", | ||
"postinstall": "npm run update" | ||
}, | ||
@@ -16,0 +18,0 @@ "author": "Ryan Penfold", |
@@ -23,2 +23,16 @@ # Dep-watch | ||
## CLI Commands | ||
### Check | ||
Performs comparison of dependencies with the snapshot. | ||
### Gitignore | ||
Appends an entry in the `.gitignore` file to prevent the default snapshot file from being commited. | ||
## Update | ||
Updates the snapshot without running check. Recommended to add this to `postinstall` script to ensure that it is kept in sync. | ||
## CLI options | ||
@@ -28,2 +42,3 @@ | ||
|----------|-------|--------------------------------------------------------------| | ||
| all | -a | Checks for changes to all dependencies | ||
| restore | -r | Restore dependencies if missing | | ||
@@ -30,0 +45,0 @@ | update | -u | Update the snapshot | |
Install scripts
Supply chain riskInstall scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.
Found 1 instance in 1 package
10791
10
167
67
1