New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

@slimio/psp

Package Overview
Dependencies
Maintainers
4
Versions
22
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@slimio/psp

Analyze compliance with the structural policy of a SlimIO project

  • 0.12.3
  • latest
  • Source
  • npm
  • Socket score

Version published
Maintainers
4
Created
Source

Project structure policy

version Maintenance MIT dep size Known Vulnerabilities Build Status

SlimIO - Project Structure Policy. A policy aims to accurately describe the constituent elements of a project. This CLI has been created to apply the following Specification.

⚠️ This project has been created for SlimIO (it will not work outside). Feel free to replicate the idea / core concept.

Requirements

  • Node.js v12 or higher
  • a SlimIO Manifest file at the root of the scanned project.

Getting Started

This package is available in the Node Package Repository and can be easily installed with npm or yarn.

$ npm i @slimio/psp
# or
$ yarn add @slimio/psp

Usage example

When installed globally the psp executable will be exposed in your terminal.

$ psp

If you want to continue the execution even for critical warnings, just run with force mode:

$ psp --force

Arguments

namedescription
-h --helpShow help
--forceEnable force mode
--gitignoreShow .gitignore file
--npmignoreShow .npmignore file
--editorconfigShow .editorconfig file

API

PSP is available in API mode too.

const psp = require("@slimio/psp");

async function main() {
    const { warn, crit } = await psp({
        forceMode: true, // <-- stay to true (else it will exit the process on CRIT).
        CWD: "./dir",
        isCLI: false, // <-- stay to false (else it will work as it was executed as a CLI).
        verbose: false
    });
    console.log(`warn => ${warn}, crit => ${crit}`);
}
main().catch(console.error);

Get a global overview of many projects

The SlimIO Sync project allow to run a command to get a global overview of warnings of all projects in the current working dir.

Dependencies

NameRefactoringSecurity RiskUsage
@slimio/isMinorLowJavaScript Type checker
@slimio/manifestMinorLowSlimIO Manifest manager
boxenMinorHighTBC
estree-walker⚠️MajorLowSimple utility for walking an ESTree-compliant AST
file-ignore-parserMinorLowParse .ignore file
file-normalize⚠️MajorLowFile normalizer
globbyMinorHighTBC
js-yaml⚠️MajorLowYAML parser/writer
kleurMinorLowcolor for TTY
make-promises-safe⚠️MajorLowForce Node.js DEP00018
markedMinorLowTBC
meriyahMinorLowTBC
sadeMinorLowSade is a small but powerful tool for building command-line interface (CLI) applications for Node.js that are fast, responsive, and helpful!
semver⚠️MajorLowSemver parser/utilities for node

License

MIT

Keywords

FAQs

Package last updated on 10 Jan 2021

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc