
Security News
Federal Government Rescinds Software Supply Chain Mandates, Makes SBOMs Optional
The U.S. government is rolling back software supply chain mandates, shifting from mandatory SBOMs and attestations to a risk-based approach.
Read all the installed packages in a folder, and produce an Array of all the data.
Read all the installed packages in a folder, and produce an Array of all the data.
A wrapper around npm's read-installed that produces a flat array rather than a nested tree structure. Also adds a few bells and whistles.
Arrays are a far easier to process and reason about than nested objects.
npm install --save installed
var installed = require('installed')
// default options
var options = {
dev: false, // exclude all dev dependencies
depth: Infinity, // depth to traverse
extraneous: true // includes extraneous deps. Set to false to filter extraneous dependencies out.
}
// options is optional
installed(process.cwd(), options, function(err, pkgs) {
if (err) throw err;
var pkgVersions = pkgs.map(function(dep) {
return dep.name + '@' + dep.version
})
console.log(pkgVersions.join('\n'))
})
> installed --help
Get a JSON dump of installed package data.
Usage: installed [options]
Options:
--dev Include development dependencies.
--extraneous Show extraneous dependencies [default: true]
--no-extraneous Filter extraneous dependencies. This will include --dev dependencies if --dev is not enabled.
--depth Traversal depth. use --depth=Infinity or --depth=-1 to traverse entire dependency tree. [default: 0]
--color Display coloured output. Auto-disabled if output is not a terminal. [default: true]
--no-color Don't display coloured output, strictly JSON.
--json Produce JSON output. Implies --no-color.
--help Show help
--version Show version number
The program below serializes the result of running installed in the
installed directory. You can see the result of this output at installed-sample.json
Note you'll need to use something like json-stringify-safe in order to safely serialize the data produced by installed, as it contains circular references.
var stringify = require('json-stringify-safe');
var installed = require('installed')
var fs = require('fs')
installed(process.cwd(), {depth: 0}, function(err, pkgs) {
if(err) throw err;
console.log(stringify(i, null, 2))
})
pkgrep was briefly known as installed so versions of installed <
2.0.0 are actually deprecated versions of pkgrep.
MIT
FAQs
Read all the installed packages in a folder, and produce an Array of all the data.
The npm package installed receives a total of 769 weekly downloads. As such, installed popularity was classified as not popular.
We found that installed demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The U.S. government is rolling back software supply chain mandates, shifting from mandatory SBOMs and attestations to a risk-based approach.

Security News
crates.io adds a Security tab backed by RustSec advisories and narrows trusted publishing paths to reduce common CI publishing risks.

Research
/Security News
A Chrome extension claiming to hide Amazon ads was found secretly hijacking affiliate links, replacing creators’ tags with its own without user consent.