Socket
Socket
Sign inDemoInstall

cache-audit

Package Overview
Dependencies
0
Maintainers
1
Versions
8
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    cache-audit

Converts your Yarn cache list into package.json files for security auditing


Version published
Weekly downloads
8
Maintainers
1
Install size
30.1 kB
Created
Weekly downloads
 

Changelog

Source

2.1.5 (2019-12-27)

🐛 Bug Fixes

  • deps: [security] bump handlebars from 4.1.2 to 4.5.3 (#74) (983c3c3)

🧦 Miscellaneous

  • deps-dev: bump @holvonix-open/release-config-js (#50) (42960da)
  • deps-dev: bump @types/node from 12.7.2 to 12.12.9 (#49) (67d5036)
  • deps-dev: bump mocha from 6.2.0 to 6.2.2 (#30) (6629848)
  • deps-dev: bump typescript from 3.6.2 to 3.7.2 (#43) (ce4f901)

Readme

Source

cache-audit -

License npm Build Status GitHub last commit codecov Dependabot Status DeepScan grade Code Style: Google npm bundle size semantic-release

This package is not ready for general use.

Quick Start

After yarn global add cache-audit:

yarn cache list --no-progress --json | yarn-cache-audit

You'll get an output of `npm audit --

License

Read the LICENSE for details.
The entire NOTICE file serves as the NOTICE that must be included under Section 4d of the License.


# cache-audit

This product contains software originally developed by Holvonix LLC.
Original Repository: https://github.com/holvonix-open/cache-audit

Copyright (c) 2019 Holvonix LLC. All rights reserved.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this software except in compliance with the License.
You may obtain a copy of the License at

   http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.

Dependencies may have their own licenses.

Keywords

FAQs

Last updated on 27 Dec 2019

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc