Security News
38% of CISOs Fear They’re Not Moving Fast Enough on AI
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
package.shipit
Advanced tools
copy the important parts of package.json into a smaller, shippable package.json for publishing
Package.shipit helps ship utility libraries & is designed to work with np
as a low-level utility to copy the important parts of package.json into a sub-directory.
This utility allows you to ship a smaller package.json to npm
than you keep in the repository while ensuring programmatically the dependencies, version, and any other information are always up-to-date; by copying the root package.json into a sub-directory.
If you are using np
you have the option to publish a sub-directory rather than root. But this does not include a package.json.
Copy package.json from your working-directory into ./dist
$ package-shipit
Copy package.json from your working directory into ./any-folder-name
$ package-shipit any-folder-name/
Use an arbitrary file: ./package.dist.json
$ package-shipit build/ --use-file package.dist.json
Indent with tabs
$ package-shipit --indent tab
Include a few extra top-level keys
$ package-shipit --include eslint,babel,prettier
Omit a few top-level keys
$ package-shipit --omit repository,bugs,homepage
Include some sub-keys
$ package-shipit \
--omit devDependencies,optionalDependencies \
--include devDependencies.prettier,devDependencies.eslint;
FAQs
copy the important parts of package.json into a smaller, shippable package.json for publishing
The npm package package.shipit receives a total of 0 weekly downloads. As such, package.shipit popularity was classified as not popular.
We found that package.shipit demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.
Security News
Company News
Socket is joining TC54 to help develop standards for software supply chain security, contributing to the evolution of SBOMs, CycloneDX, and Package URL specifications.