🚀 Big News: Socket Acquires Coana to Bring Reachability Analysis to Every Appsec Team.Learn more
Socket
Book a DemoInstallSign in
Socket

hugodep

Package Overview
Dependencies
Maintainers
1
Versions
14
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

hugodep

hugodep is for analyzing the dependencies in a project to see: how each dependency is used, and which dependencies are useless. The same goals as depcheck, but this code works 100% guaranteed without false alarms, with a 2% of their lines of code.

0.9.0
latest
Source
npm
Version published
Weekly downloads
5
150%
Maintainers
1
Weekly downloads
 
Created
Source

hugodep

hugodep is for analyzing the dependencies in a project to see: how each dependency is used, and which dependencies are useless. The same goals as depcheck, but this code works 100% guaranteed without false alarms, with a 2% of their lines of code.

Any syntax, any language

Without need of plugins, this tool supports every language and every syntax you can define in the scripts section of the package.json file.

Usage

Pass all the package.json scripts that test and build your code. The package.json scripts should have a finish, i.e. modify scripts that are not builders or stay in watch-mode.

For example and tutorial, with create-react-app we have 4 scripts: start, build, test and eject. Modify the test script to have an execution exit:

"scripts": {
    "test": "react-scripts test --watchAll=false",
    ...
}

Then calling npx, analyze the dependencies for the build, test and eject scripts, omitting start script because is an always-on server:

npx hugodep --run build --run test --run eject

This tool requires node.js. If you want faster results use an SSD.

Set --use-yarn argument for using the faster yarn. Omitting that argument uses npm.

Keywords

depcheck

FAQs

Package last updated on 24 May 2022

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts