New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More
Socket
Sign inDemoInstall
Socket

hasdep

Package Overview
Dependencies
Maintainers
1
Versions
8
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

hasdep - npm Package Compare versions

Comparing version 1.0.2 to 1.1.0

42

index.js

@@ -11,2 +11,3 @@ "use strict";

let Config;
let neg = false;

@@ -70,2 +71,6 @@ try {

alias: "version"
},
n: {
alias: "negative",
description: "<full|dev|any> List out repositories that do not have the specified dependency as a full dep, a dev dep, or either"
}

@@ -105,2 +110,4 @@ };

let matches = 0;
Object.keys(depsObj).map((dependencyName) => {

@@ -112,2 +119,4 @@

++matches;
let color = "yellow";

@@ -132,8 +141,23 @@ let info = "";

if (!matches) {
cb(null);
}
};
const logResult = (org, repo, result, isDev) => {
if (neg) {
return;
}
console.log(Chalk.cyan(`${org}/${repo} has `) + result + (isDev ? Chalk.gray(" [DEV DEPENDENCY]") : ""));
};
const logNegative = (org, repo, dep, isDev) => {
if (!neg || neg === "full" && isDev || neg === "dev" && !isDev) {
return;
}
console.log(Chalk.yellow(`${org}/${repo} does not have ${dep} as a ` + (isDev ? "devDependency" : "dependency")));
};
const searchWithinRepo = (org, repo, dep, version) => {

@@ -167,7 +191,19 @@

if (pkg.dependencies) {
checkDeps(pkg.dependencies, dep, version, (result) => logResult(org, repo, result));
checkDeps(pkg.dependencies, dep, version, (result) => {
if (!result) {
logNegative(org, repo, dep);
} else {
logResult(org, repo, result);
}
});
}
if (pkg.devDependencies) {
checkDeps(pkg.devDependencies, dep, version, (result) => logResult(org, repo, result, true));
checkDeps(pkg.devDependencies, dep, version, (result) => {
if (!result) {
logNegative(org, repo, dep, true);
} else {
logResult(org, repo, result, true);
}
});
}

@@ -227,2 +263,4 @@

const processArgs = () => {
neg = args.n;
if (args.r) {

@@ -229,0 +267,0 @@ return searchRepo(args);

2

package.json
{
"name": "hasdep",
"version": "1.0.2",
"version": "1.1.0",
"description": "Check for a dependency (and version) across a Github Org or specific repo",

@@ -5,0 +5,0 @@ "main": "index.js",

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc