Introducing Socket Firewall: Free, Proactive Protection for Your Software Supply Chain.Learn More
Socket
Book a DemoInstallSign in
Socket

npm-add-dependencies

Package Overview
Dependencies
Maintainers
1
Versions
14
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

npm-add-dependencies

Add dependencies (latest or specified versions) to the package.json file without installing them

latest
Source
npmnpm
Version
0.3.1
Version published
Maintainers
1
Created
Source

npm-add-dependencies

Warning! Starting with version 1.0.0 the package was renamed to add-dependencies.

This script adds dependencies (latest or specified versions) to the package.json file skipping the installation process.

Installing a dependency can have dangerous side effects, according to npm:

it is possible for a maliciously-written npm package, when installed, to execute a script.

It's safer and faster to add dependencies to package.json with this tool, and then only actually install them within a Docker container, for example, with docked-node.

Installation

If not using with npx (see below), you can install with:

$ npm install npm-add-dependencies [-g]

Usage

Go to a directory with the target package.json and run:

$ npm-add-dependencies <dependencies> [target] [--no-overwrite]

or with npx:

$ npx npm-add-dependencies <dependencies> [target] [--no-overwrite]

where dependencies is the list of dependencies divided by space, and target is one of the following:

  • --dev/--save-dev/-D for devDependencies
  • --peer/--save-peer/-P for peerDependencies
  • --optional/--save-optional/-O for optionalDependencies

If no target argument passed, dependencies are written to dependencies.

Use --no-overwrite flag to prevent already existing packages in package.json from being overwritten.

Example:

$ npm-add-dependencies moment@2.0.0 react@16.8 redux eslint --dev

or with npx:

$ npx npm-add-dependencies moment@2.0.0 react@16.8 redux eslint --dev

Keywords

dependencies

FAQs

Package last updated on 29 Dec 2019

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts