
Security News
AGENTS.md Gains Traction as an Open Format for AI Coding Agents
AGENTS.md is a fast-growing open format giving AI coding agents a shared, predictable way to understand project setup, style, and workflows.
@tromgy/npm-tree
Advanced tools
A convenience tool on top of 'npm list'. Presents the the dependent packages in a collapsible tree with search and dependency path capabilities.
A tool to aid in analyzing npm (or yarn) package dependencies.
It can be used either as a command-line utility, or as a pure online solution, available at https://npm-tree.netlify.app.
Requires version of Node 12 or newer and npm 6 or newer. Tested with Node versions 12.18.0 and 14.15.5, npm versions 6.14.4 and 7.6.1
To run it as a command-line tool you can install it globally:
npm install @tromgy/npm-tree -g
and run it in your project directory (the one that contains package.json):
npm-tree
or run it via npx (also in your project directory):
npx @tromgy/npm-tree
When you run it, it will create an HTML file containing the same dependency information as the output from npm list, but in a collapsible, searchable tree and display this HTML file in your default browser:
This file is removed automatically once it's loaded in the browser.
If you want to keep the file and open it later, use the --save option:
npm-tree --save
If you use drive mapping via the subst command on Windows and try to run npm-tree from such mapped drive, it will not be able to open your default browser unless you also add the correspoding mapping to the following registry key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\DOS Devices]
To use it online, you can just drop the text file containing the output from npm list or yarn list:
It will be processed right in the browser and the same searchable tree will be shown.
FAQs
A convenience tool on top of 'npm list'. Presents the the dependent packages in a collapsible tree with search and dependency path capabilities.
The npm package @tromgy/npm-tree receives a total of 3 weekly downloads. As such, @tromgy/npm-tree popularity was classified as not popular.
We found that @tromgy/npm-tree demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
AGENTS.md is a fast-growing open format giving AI coding agents a shared, predictable way to understand project setup, style, and workflows.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.