
Security News
Software Engineering Daily Podcast: Feross on AI, Open Source, and Supply Chain Risk
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.
npm2debian
Advanced tools
npm2debian is a command line tool to convert packages from npmjs.org repository to Debian packages.
Contributions are welcome, we have some tasks to do.
npm2debian [options] <package>
-h, --help : Help
-o OUTPUT, --output=OUTPUT : Output directory
--versioned : Build versioned debian package
--no-package-prefix : Do not add prefix to Debian package name
-m MAINTAINER,
--maintainer=MAINTAINER : Debian package maintainer name
-e EMAIL, --email=EMAIL : Debian package maintainer email
-p PACKAGEPREFIX,
--package-prefix=PACKAGEPREFIX : Debian package name prefix
-u DEBVERSION,
--debian-version=DEBVERSION : Debian package version
-b DEBBUILD,
--debian-build=DEBBUILD : Debian package build
--registry=REGISTRY : Registry for npm install
-v, --version : Show version
These environmanet variables are used during the packaging:
EMAIL="email@address"
DEBFULLNAME="Maintainer Full Name"
You will need the following Debian packages for the tool to work:
sudo apt-get install devscripts dh-make
You will need the following Debian packages to build debs:
sudo apt-get install debhelper fakeroot dpkg-dev
You have several options.
Install globally from npm repository
npm -g install npm2debian
Install locally
npm install npm2debian
Install from sources
git clone https://github.com/arikon/npm2debian
cd npm2debian
npm install
Simple converting of bem package to npm-bem:
npm2debian bem
It will create npm-bem-<version> directory with source Debian package describing only one binary package npm-bem.
To get Debian package with version in its name you should specify --versioned options:
npm2debian --versioned bem
It will create npm-bem-<version> directory with source Debian package describing two binary packages:
npm-bemnpm-bem-<dashed-version>, where <dashed-version> is a package version with dots replaced to dashesTo build debs run:
cd npm-bem*
dpkg-buildpackage -rfakeroot
FAQs
Utility to convert npm packages to Debian packages
We found that npm2debian demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh joins Software Engineering Daily to discuss modern software supply chain attacks and rising AI-driven security risks.

Security News
GitHub has revoked npm classic tokens for publishing; maintainers must migrate, but OpenJS warns OIDC trusted publishing still has risky gaps for critical projects.

Security News
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.