
Research
PyPI Package Impersonates SymPy to Deliver Cryptomining Malware
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.
Get the latest package.json for a module.
You might also be interested in get-pkg.
Install with npm:
$ npm install --save get-latest
This module will return the latest (or newest) package.json file for a specified module. The getLatest function requires the current package.json file to be able to compare versions and return the current package.json if the latest hasn't been downloaded yet.
The first use of get-latest will always return the current package.json because the latest has not been downloaded. Once the latest is downloaded and cached, then the latest version will be returned.
This is intended to be used by CLIs and applications that want to quickly check for the latest version without blocking execution, but still download the latest to be used during the next execution of the CLI or application.
var pkg = require('./package.json');
var getLatest = require('get-latest');
var latest = getLatest(pkg);
console.log('current', pkg.version);
console.log('latest', latest.version);
//=> 'current 0.1.0'
//=> 'latest' 0.2.0'
Get the latest package.json for the specified package.json and given options.
This library will use the given package.json to determine if it's the latest one or if there is a newer version. If the given package.json is the latest, then it is returned.
Params
pkg {Object}: Current package.json to use for checking for the latest.options {Object}: Additional options to control how the checking is handled.options.timespan {String}: String used to determine if the background process should be started to npm for the latest version. Defaults to '1 hour ago'.options.cache {Boolean}: Set to false to ensure that the background process is always started.returns {Object}: Latest package.json is returned.Example
var latest = getLatest(require('./package.json'));
Pull requests and stars are always welcome. For bugs and feature requests, please create an issue.
Please read the contributing guide for avice on opening issues, pull requests, and coding standards.
(This document was generated by verb-generate-readme (a verb generator), please don't edit the readme directly. Any changes to the readme must be made in .verb.md.)
To generate the readme and API documentation with verb:
$ npm install -g verb verb-generate-readme && verb
Install dev dependencies:
$ npm install -d && npm test
Brian Woodward
Copyright © 2016, Brian Woodward. Released under the MIT license.
This file was generated by verb, v0.9.0, on August 17, 2016.
FAQs
Get the latest package.json for a module.
We found that get-latest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious PyPI package sympy-dev targets SymPy users, a Python symbolic math library with 85 million monthly downloads.

Product
Create and share saved alert views with custom tabs on the org alerts page, making it easier for teams to return to consistent, named filter sets.

Product
Socket’s Rust and Cargo support is now generally available, providing dependency analysis and supply chain visibility for Rust projects.