New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details
Socket
Book a DemoSign in
Socket

package-merge

Package Overview
Dependencies
Maintainers
1
Versions
3
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

package-merge

Intelligently merge `package.json` files.

latest
npmnpm
Version
0.1.2
Version published
Weekly downloads
146
170.37%
Maintainers
1
Weekly downloads
 
Created
Source

package-merge

Intelligently merge package.json files.

This is pretty much built for yeoman. It attempts to combine two separate package.json files into one, respecting as much existing content as possible including already existing dependencies and package.json formatting.

var merge = require('package-merge');
var dst = fs.readFileSync('package.a.json');
var src = fs.readFileSync('package.b.json');

// Create a new `package.json`
console.log(merge(dst, src));

It allows you to do things like define scripts or dependencies that you would like to include as part of a larger project.

Merging:

{
	"name": "my-package",
	"dependencies": {
		"babel": "^5.2.2",
		"lodash": "^3.2.5"
	}
}
{
	"dependencies": {
		"babel": "^5.4.1",
		"eslint": "^0.22.1"
	}
}

results in:

{
	"name": "my-package",
	"dependencies": {
		"babel": "^5.4.1",
		"lodash": "^3.2.5",
		"eslint": "^0.22.1"
	}
}

FAQs

Package last updated on 12 Jun 2015

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts