Socket
Socket
Sign inDemoInstall

hash-for-dep

Package Overview
Dependencies
31
Maintainers
5
Versions
26
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    hash-for-dep

generates a hash that represents a module and its depenencies uniqueness


Version published
Weekly downloads
159K
decreased by-39.98%
Maintainers
5
Install size
1.13 MB
Created
Weekly downloads
 

Readme

Source

hash-for-dep Build Status Build status

Generate a hash representing the stats of this module files and all its descendents files.

var hashForDep = require('hash-for-dep');

hashForDep('rsvp'); // if RSVP is a dependency of the current project, you will get a checksum for it
hashForDep('rsvp', 'path/to/other/project'); //  you will get a checksum for RSVP resolved relative to the provided root

What does Hash For Dep consider a dependency?

HashForDep respects the node resolution algorithim.

For example given:

foo/package.json
foo/index.js
foo/node_modules/a/
foo/node_modules/a/package.json
foo/node_modules/a/index.js
foo/node_modules/a/node_modules/b
foo/node_modules/a/node_modules/b/package.json
foo/node_modules/a/node_modules/b/index.js
foo/node_modules/a/node_modules/f
foo/node_modules/a/node_modules/f/index.js
foo/node_modules/a/node_modules/f/package.json
foo/node_modules/c
foo/node_modules/c/index.js
foo/node_modules/c/package.json
foo/node_modules/d
foo/node_modules/d/index.js
foo/node_modules/d/package.js

where foo/package.json depends on a and c but not d and foo/node_modules/a/package.json depends on b not f

HashForDep will consider: a c b as dependencies, and simply ignore d and f. When HashForDep considers a dependency, it will stat each of its files and those of its dependencies.

Cache

NOTE: By default, these hashes are cached for the life of the process. As this is the same strategy node uses for require(x) we can safely follow suit.

That being said, some scenarios may exist where this is not wanted. So just like require._cache exists, we provide the following options:

To evict the cache manually (maybe for testing)
require('hash-for-dep')._resetCache();
To opt out of the cache on a per invocation basis
var hashForDep = require('hash-for-dep');

hashForDep(name, path, null, false /* this mysterious argument should be set to false */);

FAQs

Last updated on 21 Mar 2019

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc