Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
bulk-npm-install
Advanced tools
Run bulk dependency installation in any directory using a single command. It automatically detects whether to use npm
, yarn
, or pnpm
based on lock files.
Run the following command:
npx bulk-npm-install -F ./path-to-project -R -L
Where:
-F
is the root folder where projects are located.-R
enables recursive searching for projects in subdirectories.-L
enables logging.You can install bulk-npm-install globally for easy access or use it directly via npx
.
# yarn
yarn global add bulk-npm-install
# npm
npm install -g bulk-npm-install
Alternatively, you can use npx
without global installation:
npx bulk-npm-install -F ./path-to-project -R -L
Name | Default Value | Description |
---|---|---|
-F | "./" | The parent folder to start scanning for projects. |
-R | false | If set, it will recursively scan subdirectories for projects. |
-L | false | Enables detailed logging during the process. |
You can pass the parameters in any order. If recursive scanning is required, use the -R
flag, and logs can be enabled with -L
. Example:
npx bulk-npm-install -F ./my-folder -R -L
This will scan the ./my-folder
, recursively scan subdirectories, and log the process.
You can also use bulk-npm-install as a module in your JavaScript/TypeScript projects:
import { BulkInstall } from 'bulk-npm-install';
const installer = new BulkInstall({
parentFolder: "./my-project",
recursive: true,
logs: true
});
await installer.run();
Each time bulk-npm-install runs, it tracks the results for each folder it processes. Results can be:
SUCCESS
: The dependencies were installed successfully.FAILED
: There was an error during installation.SKIPPED
: Multiple lock files were found, and the installation was skipped.Results are logged and can be viewed in the console once the process completes.
FAQs
Execute npm install on multiple directories at once
We found that bulk-npm-install demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.