Socket
Socket
Sign inDemoInstall

lifion-verify-deps

Package Overview
Dependencies
12
Maintainers
5
Versions
10
Alerts
File Explorer

Advanced tools

Install Socket

Detect and block malicious and high-risk dependencies

Install

    lifion-verify-deps

Verifies that installed NPM modules are the latest currently available version.


Version published
Weekly downloads
0
decreased by-100%
Maintainers
5
Install size
359 kB
Created
Weekly downloads
 

Changelog

Source

v2.0.1 (2021-12-13)

Readme

Source

lifion-verify-deps

Verifies that installed NPM modules are the latest currently available version.

Getting Started

To install the module:

npm install lifion-verify-deps --global

To run command:

lifion-verify-deps

To use as module:

const verifyDeps = require('lifion-verify-deps');

verifyDeps({ dir: './path-to/project-directory' })
  .then(() => /* all installed packages up to date */)
  .catch((err) => /* there are packages to be updated */)

API Reference

verifyDeps([options]) ⏏

Verifies the dependencies listed in the package.json of the given directory.

Kind: Exported function

ParamTypeDefaultDescription
[options]ObjectOptional parameters.
[options.autoUpgrade]booleanfalseAutomatically upgrade all suggested dependencies.
[options.dir]stringThe path where to look for the package.json file.
[options.logger]LoggerA logger instance, with a similar API as the console object.

verifyDeps~isValidNpmPackageName(name)

Validates package name.

Kind: inner method of verifyDeps
Throws:

  • Error - Package name is invalid.
ParamTypeDescription
namestringPackage name.

verifyDeps~getLatestVersions(name) ⇒ Promise.<Array.<string>>

Gets available versions for provided package name.

Kind: inner method of verifyDeps
Returns: Promise.<Array.<string>> - - List of available versions.
Throws:

  • Error - Output failed JSON parse.
ParamTypeDescription
namestringPackage name.

verifyDeps~getLatestTag(name) ⇒ Promise.<string>

Gets latest tag from provided package name.

Kind: inner method of verifyDeps
Returns: Promise.<string> - - Return latest version, if latest tag exists.
Throws:

  • Error - Output failed JSON parse.
ParamTypeDescription
namestringPackage name.

verifyDeps~getLatestVersion(name, wanted) ⇒ Promise.<string>

Finds valid upgrade version of the provided package name.

Kind: inner method of verifyDeps
Returns: Promise.<string> - - Valid upgrade version.
Throws:

  • Error - Outdated version in package.json, version was likely unpublished.
ParamTypeDescription
namestringPackage name.
wantedstringPackage version.

verifyDeps~getInstalledVersion(currentDir, name, logger) ⇒ string | null

Gets currently installed version for provided package name.

Kind: inner method of verifyDeps
Returns: string | null - - Installed version or null if not installed.
Throws:

  • Error - Unable to find installed versions, try installing node modules by running npm i.
ParamTypeDescription
currentDirstringPath to package.json directory.
namestringPackage name.
loggerLoggerLogger flag.

verifyDeps~pushPkgs(params) ⇒ Array.<Promise.<PackageStatus>>

Builds list of packages to update.

Kind: inner method of verifyDeps
Returns: Array.<Promise.<PackageStatus>> - - NPM package state.

ParamTypeDescription
paramsObjectObject with parameters.
params.depsObject.<string, string>List of dependencies.
params.dirstringDirectory location.
params.loggerLoggerLogging tool.
params.typestringType of dependency.

verifyDeps~getPkgIds(filteredPkgs) ⇒ string

Formats package name for installation.

Kind: inner method of verifyDeps
Returns: string - - Concatenated 'name@latest' for provided package.

ParamTypeDescription
filteredPkgsArray.<PackageStatus>Package properties.

verifyDeps~removeLockedDependencies(deps) ⇒ Object.<string, string> | Object

Filters out dependencies with locked versions.

Kind: inner method of verifyDeps
Returns: Object.<string, string> | Object - List of dependencies excluding locked semver versions.

ParamTypeDescription
depsObject.<string, string>List of dependencies.

License

Apache-2.0

Keywords

FAQs

Last updated on 14 Dec 2021

Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚡️ by Socket Inc