A tool allowing Rocketmakers to detect bitrot in projects.
The main focus of this tool is to notify about versions becoming outdated over time.
To setup this in your project you will need to:
Add yaml extension from vscode marketplace
Add the below to .vscode/settings.json in the root of your project
"yaml.schemas": {
"node_modules/bitrot/schema.json": "bitrot.yaml",
},
Add bitrot.yaml to the root of your project using node_modules/bitrot/schema.json to validate/help, an example is below:
projects:
- name: 'backend'
path: 'backend'
tags: ['node']
justifications:
- rule: 'pkg:npm/mocha'
reason: 'Not switched to Jest yet'
This can then be ran using npx @rocketmakers/bitrot which if not installed will run the latest version. If you install bitrot as a package you will be locked to a specific version and will not receive rule updates.
FAQs
A tool for checking for version drift of packages over time.
The npm package bitrot receives a total of 0 weekly downloads. As such, bitrot popularity was classified as not popular.
We found that bitrot demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.
Security News
Sonar’s acquisition of Tidelift highlights a growing industry shift toward sustainable open source funding, addressing maintainer burnout and critical software dependencies.
Security News
Ransomware negotiators share how modern cybercriminals operate like corporations, using specialized teams, negotiation tactics, and reputation management.