Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@vodafoneuk/licenses-generator
Advanced tools
The licenses generator will generate licenses for a given package/repository based on package dependencies specified in package.json
Dev dependencies are excluded.
It will only scan for licenses at the first level - it will not go through all dependent packages of the given package.
Read package.json
Get all dependencies from the package.json file
Iterate through all dependencies and try to find **/**/{LICENSE,LICENCE,COPYING}
ignoring node_modules
Parse and save output
node node_modules/@vodafoneuk/licenses-generator/index.js get --root packages/packageA
node node_modules/@vodafoneuk/licenses-generator/index.js get --root [path_to_package_json]
or
node node_modules/@vodafoneuk/licenses-generator/index.cjs get --root [path_to_package_json]
publish
action.Author: Vodafone UK
Current lead maintainer: Radek Swiat
See all contributors here
FAQs
licenses generator
We found that @vodafoneuk/licenses-generator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.