
Security News
curl Shuts Down Bug Bounty Program After Flood of AI Slop Reports
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.
module-tree
Advanced tools
Create a visual tree of module dependencies using archy. Optionally pass a glob pattern to limit the result to names with that pattern, or a regex to selectively highlight package names.
Create a visual tree of module dependencies using archy. Optionally pass a glob pattern to limit the result to names with that pattern, or a regex to selectively highlight package names.
Install globally with npm
$ npm install -g module-tree
$ mtree <options>
Results in a tree that looks something like:
module-tree
βββ¬ ansi-yellow
β βββ ansi-wrap
βββ archy
βββ¬ define-property
β βββ¬ is-descriptor
β βββ¬ is-accessor-descriptor
β β βββ¬ kind-of
β β βββ is-buffer
β βββ¬ is-data-descriptor
β β βββ¬ kind-of
β β βββ is-buffer
β βββ¬ kind-of
β β βββ is-buffer
β βββ lazy-cache
...
--version | -v: show versions next to package names (like npm's output when installing modules)--pattern | -p: glob pattern to pass to glob-object for filtering packages by name. Visit glob-object for usage instructions and available options.--color | -c: Add or remove color.Show versions next to package names.
$ mtree -v
Results in something like:
Remove color
$ mtree --color=false
# or
$ mtree -c=false
Add color
Only apply coloring to packages that match the given regex pattern (make sure to wrap your pattern in quotes to ensure it's properly converted to regex):
# apply coloring to package names that begin with "is-"
$ mtree -c="is-.*"
Results in something like:
When run in this project, the following command:
# remove color, filter package name "get-value"
$ mtree -c=false -p="**.get-value"
Results in:
{ label: 'module-tree',
nodes:
[ { label: 'glob-object',
nodes: [ { label: 'get-value', nodes: [] } ] },
{ label: 'normalize-pkg',
nodes:
[ { label: 'map-schema',
nodes:
[ { label: 'get-value', nodes: [] },
{ label: 'union-value',
nodes: [ { label: 'get-value', nodes: [] } ] } ] } ] } ] }
Which renders to:
module-tree
βββ¬ glob-object
β βββ get-value
βββ¬ normalize-pkg
βββ¬ map-schema
βββ get-value
βββ¬ union-value
βββ get-value
The top level export is a function that will build a tree from the current project's package.json:
var pkgTree = require('module-tree');
console.log(pkgTree());
Additionally, the following methods are exposed.
Build an object, where dependencies represented properties and keys are module names.
Params
patterns {Object}: Glob pattern to pass to glob-object for filtering packages.options {Object}returns {Object}Example
{
'union-value': {
'get-value': {}
}
}
Build an object that can be passed to archy, where dependencies are represented as nodes, and the name of each package is used as the label.
Params
tree {Object}options {Object}returns {Object}Example
// results in an object like this
{ label: 'union-value',
nodes: [ { label: 'get-value', nodes: [] } ] }
Build a tree from module dependencies using archy.
Params
patterns {String|Array}: Glob patterns to pass to glob-objectoptions {Object}returns {Object}normalize-pkg: Normalize values in package.json. | homepage
Generate readme and API documentation with verb:
$ npm install verb && npm run docs
Or, if verb is installed globally:
$ verb
Install dev dependencies:
$ npm install -d && npm test
Pull requests and stars are always welcome. For bugs and feature requests, please create an issue.
Jon Schlinkert
Copyright Β© 2016 Jon Schlinkert Released under the MIT license.
This file was generated by verb, v0.9.0, on March 20, 2016.
FAQs
Create a visual tree of module dependencies using archy. Optionally pass a glob pattern to limit the result to names with that pattern, or a regex to selectively highlight package names.
The npm package module-tree receives a total of 1 weekly downloads. As such, module-tree popularity was classified as not popular.
We found that module-tree demonstrated a not healthy version release cadence and project activity because the last version was released a year ago.Β It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
A surge of AI-generated vulnerability reports has pushed open source maintainers to rethink bug bounties and tighten security disclosure processes.

Product
Scan results now load faster and remain consistent over time, with stable URLs and on-demand rescans for fresh security data.

Product
Socket's new Alert Details page is designed to surface more context, with a clearer layout, reachability dependency chains, and structured review.