Socket
Book a DemoInstallSign in
Socket

depsane

Package Overview
Dependencies
Maintainers
11
Versions
6
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

depsane

Checks for missing dependencies based on code reachable from the main entrypoint specified in package.json

latest
Source
npmnpm
Version
0.1.0
Version published
Weekly downloads
4
-71.43%
Maintainers
11
Weekly downloads
 
Created
Source

depsane

Test application

Checks for missing dependencies based on code reachable from the main entrypoint specified in package.json (defaults: index.js). Furthermore: if a bin-object is specified in package.json all code reachable from those files will also be included.

depsane is focused on determining which dependencies that should be present specifically in dependencies and devDependencies. It classifies a dependency found in devDependencies used in the main code path as missing, and a dependency only used as a devDependency but that is specified in dependencies is considered missing.

This solves the problem where an application works fine locally and during testing but fails once deployed as the deployed version will only be installed with its' dependencies but during testing and development both devDependencies and dependencies are installed.

There is also some experimental heuristics implemented to determine if mocha or eslint and their associated plugins are used as devDependencies or not.

Installation

npm install --save-dev depsane

Usage

npx depsane [directory] [arguments]

Prints missing dependencies and unused dependencies.

Exits with code 0 if no missing or unused dependencies are found and 1 otherwise.

The directory defaults to the current directory.

All of the arguments are optional:

--ignore-dirs: comma-separated list of dirs to ignore.

--ignores: comma-separated list of dependencies to ignore, supports wildcards (i.e. "eslint*" will ignore all dependencies that starts with eslint).

Changelog

Can be found here.

License

Released under the MIT license.

Keywords

check

FAQs

Package last updated on 02 Jun 2022

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts