New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

node-dependency-graph

Package Overview
Dependencies
Maintainers
1
Versions
12
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

node-dependency-graph

Construct a node dependency graph. Resolves dependencies, devDependencies and peerDependencies.

latest
Source
npmnpm
Version
2.1.0
Version published
Maintainers
1
Created
Source

dependency-graph

Construct a node dependency graph. Resolves dependencies, devDependencies and peerDependencies.

Features

  • Support circular dependencies.
  • Support circular peerDependencies.
  • Create duplicate versions of a package when there is a peerDependency conflict.
  • Ignore optional dependencies and optional peer-dependencies if they cannot be fulfilled.

Usage

const { createDependencyGraph } = require("dependency-graph");

const packageManifests = [
  {
    name: "A",
    version: "1.0.0",
    isLocal: true,
    dependencies: {
      "B": "^1.0.0",
      "C": "^1.0.0"
    }
  },
  {
    name: "B",
    version: "1.1.0",
    isLocal: false
  },
  {
    name: "C",
    version: "1.0.1",
    isLocal: false,
    peerDependencies: {
      "B": "*"
    }
  }
];

const resolutionMap = {
  "B": { "^1.0.0": "1.1.0" },
  "C": { "^1.0.0": "1.0.1" }
} 
const graph = createDependencyGraph(packageManifests, resolutionMap);
console.log(graph);
/*
{
  nodes: [
    { id: 0, name: "A", version: "1.0.0" },
    { id: 1, name: "B", version: "1.1.0" },
    { id: 2, name: "C", version: "1.0.1" }
  ],
  links: [
    { sourceId: 0, targetId: 1 },
    { sourceId: 0, targetId: 2 },
    { sourceId: 2, targetId: 1 }
  ]
}
*/

FAQs

Package last updated on 16 Aug 2021

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts