Security News
Fluent Assertions Faces Backlash After Abandoning Open Source Licensing
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
dependency-viewer
Advanced tools
Dependency viewer across nodejs projects
Currently the project has support for:
npm install dependency-viewer
const Gitlab = require('./lib/wrappers/Gitlab');
const GraphBuilder = require('./lib/GraphBuilder');
const gitlab = new Gitlab('organization', { token: 'super-secret-token' });
const graphBuilder = new GraphBuilder(gitlab);
graphBuilder.buildDependencyGraph({
wrapperOptions: {
excludeProjects: [],
packageInclude: '',
packagePrefix: '',
},
}).then(async (dependencyGraphs) => {
// do something with your dependecy graphs
});
GraphBuilder builds the dependency graph given a wrapper
GitlabWrapper implements all the communication with Gitlab api
Wrapper extend it when implementing a Wrapper
GraphBuilder builds the dependency graph given a wrapper
Create new GraphBuilder
Param | Type |
---|---|
wrapper | Wrapper |
Object
build the dependency graph
Kind: instance method of GraphBuilder
Returns: Object
- all dependencies {allDepsGraph, proDepsGraph, devDepsGraph }
Param | Type |
---|---|
wrapperOptions | Object |
GitlabWrapper implements all the communication with Gitlab api
Create new GitlabWrapper
Param | Type | Default | Description |
---|---|---|---|
[organization] | String | '' | name of organization |
options | Object | options object | |
[options.protocol] | String | https | protocol to be used |
[options.domain] | String | gitlab.com | domain to be used |
options.token | String | token from Gitlab |
Object
Get all package.json from gitlab projects
Kind: instance method of GitlabWrapper
Returns: Object
- All dependencies objects
Param | Type | Default | Description |
---|---|---|---|
options | Object | options object | |
[options.excludeProjects] | Array.<String> | [] | array of strings representing projects to exclude |
[options.packagePrefix] | String | '' | inlcude packages that have this prefix in their name. Useful for organization packages |
[options.packageInclude] | String | '' | include packages that contain this this in their name |
Wrapper extend it when implementing a Wrapper
Kind: instance method of Wrapper
Param | Type | Description |
---|---|---|
options | Object | options object |
options.excludeProjects | Array.<String> | array of strings representing projects to exclude |
options.packagePrefix | String | inlcude packages that have this prefix in their name. Useful for organization packages |
options.packageInclude | String | include packages that contain this this in their name |
FAQs
View package dependencies across projects
The npm package dependency-viewer receives a total of 6 weekly downloads. As such, dependency-viewer popularity was classified as not popular.
We found that dependency-viewer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Fluent Assertions is facing backlash after dropping the Apache license for a commercial model, leaving users blindsided and questioning contributor rights.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.