
Security Fundamentals
Turtles, Clams, and Cyber Threat Actors: Shell Usage
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
circular-dependency-test
Advanced tools
Detects circular dependencies in modules compiled with Webpack
Detects circular dependencies in modules compiled with Webpack.
npm install --save-dev circular-dependency-test
Only required if you want to generate visual graphs using Graphviz.
brew install graphviz || port install graphviz
apt-get install graphviz
If your Webpack config is in ./webpack.config.js
setup a script in package.json
of your project:
{
"scripts": {
"test:dependency": "circular-dependency-test"
}
}
For custom webpack config path:
{
"scripts": {
"test:dependency":
"circular-dependency-test --config=config/my-webpack.config.js"
}
}
Then run:
npm run test:dependency
Custom path to Webpack config.
circular-dependency-test --config=config/my-webpack.config.js
Regular expression to exclude files from dependency test. By default dependencies from node_modules
are excluded.
circular-dependency-test --exclude='.+\.types\.ts|node_modules'
Creates dependency graph. Default format is gif
.
Requires Graphviz to be installed.
circular-dependency-test --image=reports/dependency-graph.gif
Creates dependency graph in desired format. See all formats: https://graphviz.gitlab.io/_pages/doc/info/output.html
Most common image types: gif
png
svg
jp2
jpg
pdf
circular-dependency-test --image=reports/dependency-graph.svg --format=svg
Saves the image file with a timestamp.
circular-dependency-test --image=reports/dependency-graph.gif --timestamp
For creating visual graphs:
FAQs
Detects circular dependencies in modules compiled with Webpack
We found that circular-dependency-test demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security Fundamentals
The Socket Threat Research Team uncovers how threat actors weaponize shell techniques across npm, PyPI, and Go ecosystems to maintain persistence and exfiltrate data.
Security News
At VulnCon 2025, NIST scrapped its NVD consortium plans, admitted it can't keep up with CVEs, and outlined automation efforts amid a mounting backlog.
Product
We redesigned our GitHub PR comments to deliver clear, actionable security insights without adding noise to your workflow.