
Security News
Feross on TBPN: How North Korea Hijacked Axios
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.
sensitive-data-cleaner
Advanced tools
NPM package that removes all sensitive data in package.json or package-lock.json
Use this library to remove all sensitive information from your package.json on installing before publishing your app
sensitive-data-cleaner is available as an NPM package. You can install sensitive-data-cleaner in your project's directory as usual:
$ npm install sensitive-date-cleaner --save-dev
sensitive-data-cleaner is an utility for your development life cycle so you don't expose any potential information that can be used against you as user names, emails, jenkins or npm private registry paths.
When sensitive-data-cleaner exposes a cli called clean-sensitive-data
In order to make this tool work we have to provide some arguments.
In order to find the package.json files it's needed to provide at least one pattern, but you can provide more than just one pattern. The pattern accepts wildcards.
clean-sensitive-data --pattern **/node_modules/**/package.json
clean-sensitive-data --pattern **/node_modules/**/package.json --pattern node_modules/@scope/**/package.json
clean-sensitive-data -p **/node_modules/**/package.json -p node_modules/@scope/**/package.json
By default clean-sensitive-data only shows a message on finishing processing all the files found using the provided patterns.
On setting verbose argument it will show a lot of more information about all the files being processed, package.json information before stripping data, after stripping data...
clean-sensitive-data --verbose --pattern **/node_modules/**/package.json --pattern node_modules/@scope/**/package.json
This library has been written using TypeScript.
If you need to use it in your project but you are not working with TypeScript you can always to build the code using npm run build This command will lint your code, run the tests and *compile to TypeScript.
This project is maintained by a community of developers. Contributions are welcome and appreciated.
You can find sensitive-data-cleaner on GitHub; feel free to start an issue or create a pull requests:
https://github.com/tcorral/sensitive-data-cleaner
For more information, read the contribution guide.
Copyright (c) 2019 Tomas Corral.
Copyright (c) 2019 sensitive-data-cleaner Contributors.
Licensed under the MIT License.
FAQs
NPM package that removes all sensitive data in package.json or package-lock.json
We found that sensitive-data-cleaner demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.

Security News
OpenSSF has issued a high-severity advisory warning open source developers of an active Slack-based campaign using impersonation to deliver malware.

Research
/Security News
Malicious packages published to npm, PyPI, Go Modules, crates.io, and Packagist impersonate developer tooling to fetch staged malware, steal credentials and wallets, and enable remote access.