
Product
Introducing Repository Access Permissions and Custom Roles
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.
npm-link-check
Advanced tools
CLI utility that checks whether a project's current node modules tree contains npm-link'ed packages
CLI utility that checks whether a project's current node modules tree contains npm-link'ed packages.
So that you don't build a distributed bundle containing linked packages ever again!
npm-link-check even works with npm scoped packages. Big ups @Istenes for that PR :beers:
# for CLI use:
npm install -g npm-link-check
# for npm-script use:
npm install npm-link-check
# to check current working directory
npm-link-check
# to check arbitrary project
npm-link-check path/to/project/root
npm-link-check will log something like:
Some npm-link\'ed packaged were found:
- package dummy (at node_modules/dummy) is linked
and exit with code 1 if one or many packages npm-link'ed are found. Big ups to @c-eliasson for cleaning that up!
In this era of bundled and transpiled javascript, it is common for projects to
build a distributed version when running the npm version task. Using npm-link-check, the
often neglected check for npm-link'ed packages can automated as follow:
In your project's package.json, add:
{
"scripts": {
"preversion": "npm-link-check"
}
}
making npm-link-check run on npm version before your package's version is
bumped. If an npm-link'ed package if found, the npm version task will be
aborted.
2024 Étienne Tétreault-Pinard. MIT License
FAQs
CLI utility that checks whether a project's current node modules tree contains npm-link'ed packages
The npm package npm-link-check receives a total of 568 weekly downloads. As such, npm-link-check popularity was classified as not popular.
We found that npm-link-check demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.

Product
Socket MCP now lets AI assistants review org alerts, investigate threats using the Socket threat feed, and inspect package files in addition to dependency scoring.

Product
Socket Firewall blocks malicious VS Code and Open VSX extensions before install, protecting developers from compromised editor marketplaces.