
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
npm-platform-dependencies
Advanced tools
Module to specify dependencies for different operating systems.
Small script that allows you to specify OS-specific dependencies in your package.json and install them only in that OS.
Install via:
npm install npm-platform-dependencies
Specify the specific dependencies for each platform, like:
"darwinDependencies": {
"nodobjc": "latest"
},
"win32Dependencies": {
"edge": "latest"
}
Then run:
npmpd
And that's it! Depending the platform where you run the command, it will install one or the other (or nothing if linux).
To use it just after npm install, put this script on the scripts section of package.json
"postinstall": "npmpd"
Simply add any arguments to the npmpd call to have them appended to the npm install
process.
The example below shows how you could append the --ignore-scripts
argument to the install process.
npmpd --ignore-scripts
Or append the arguments at the scripts section of package.json
"postinstall": "npmpd --ignore-scripts"
Be sure to make your code detect the platform you are running on, or you will end up requiring things you don't have installed!
I came across a problem where it would be useful to specify platform specific dependencies. For instance, when trying to deal with addons that connect to specific os frameworks (Cocoa, .NET...). This is an easy solution if you don't want to deal with building a native addon with node-gyp, if the functionalities you need are already in different os specific packages.
Another use case would be when dealing with wrappers of os specific programs, and you want to link to one or the other depending the platform you run your program with.
MIT License Copyright (c) 2016 Alberto Fernandez
FAQs
Module to specify dependencies for different operating systems.
The npm package npm-platform-dependencies receives a total of 55 weekly downloads. As such, npm-platform-dependencies popularity was classified as not popular.
We found that npm-platform-dependencies demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.