Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Command line tool to find npm dependencies that have been ditched. A ditched package is one that has not been updated in more than one year.
This is a fork of the abandoned project abandoned.
Within your project, run
npx ditched
You can also install it as a dev dependency and use it in your scripts, for example as part of your build procedure or as a reminder after install.
npm install --dev ditched
package.json:
"scripts": {
"test": "ditched",
"postinstall": "ditched"
}
Options:
--help Show help [boolean]
--version Show version number [boolean]
-a, --all Include all dependencies in the resulting table, not only those
that are ditched [boolean] [default: false]
-d, --days The number of days since last release needed to consider a
package as ditched [number] [default: 365]
-l, --levels How many levels we go down recursively [number] [default: 0]
FAQs
List dependencies that haven't been updated in a long time.
The npm package ditched receives a total of 21 weekly downloads. As such, ditched popularity was classified as not popular.
We found that ditched demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.