Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
install-local-dependencies
Advanced tools
Yet another local dependency installer (and watcher). Works with NPM, Yarn and PNPM.
install-local-dependencies
checks your package.json and installs the listed local packages as they were installed from npm
. This helps you to get a production-like installation of your locally developed package, without all the issues of symlinked packages (npm link
), invalid peerDependencies, or different dependency instances in the project, and the development package (eg. React's Invalid Hook Call warnings).
$ npm install install-local-dependencies -g
Instead of $ (npm|yarn|pnpm) install
, install your project dependencies with $ install-local-dependencies
. It will check the local dependencies listed in your package.json, and install all of your project's dependencies, not only the local ones.
Once all is installed, you can continue developing your local package, the watch-local-dependencies
script will watch and immediately copy the changed files to the node_modules folder.
# Install
$ install-local-dependencies
# Watcher
$ watch-local-dependencies
package.json
{
//...
"dependencies": {
"my-awesome-package": "file:../package-folder",
},
//...
}
.localdependenciesrc
{
"manager": "npm", // the package manager you are using for installing the packages (example: "npm" or "yarn" or "pnpm")
"modules_dir": "node_modules",
"install_args": "", // extra arguments for the internal npm/yarn/pnpm install command (example: "--legacy-peer-deps")
"types": ["dependencies"], // dependency types you want to handle with `install-local-dependencies` (these packages will also get installed, but in the regular way) (defaults to ["dependencies", "devDependencies"])
"ignored_packages": [], // list of local packages you don't want to handle with `install-local-dependencies` (these packages will also get installed, but in the regular way)
}
Sponsored by: SRG Group Kft.
FAQs
Yet another local dependency installer
The npm package install-local-dependencies receives a total of 8 weekly downloads. As such, install-local-dependencies popularity was classified as not popular.
We found that install-local-dependencies demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.