New Research: Supply Chain Attack on Axios Pulls Malicious Dependency from npm.Details →
Socket
Book a DemoSign in
Socket

stackshare

Package Overview
Dependencies
Maintainers
1
Versions
5
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

stackshare

StackShare CLI - Scan repos and sync tech stacks

latest
Source
npmnpm
Version
0.0.5
Version published
Weekly downloads
17
13.33%
Maintainers
1
Weekly downloads
 
Created
Source

StackShare CLI

Scan your projects and automatically detect the tools you're using. Update your StackShare tech stack without manual effort.

Beta - The StackShare CLI is currently in beta. Features may change and we'd love your feedback!

Quick Start

npx stackshare scan

This scans your current directory and detects tools automatically. No installation required.

Installation

For frequent use, install globally:

npm install -g stackshare
# or
pnpm add -g stackshare

Prerequisites

  • Node.js 18+ - Download from nodejs.org

How It Works

The CLI maintains a curated database of 4,600+ tools across 71 StackShare categories, each with specific detection patterns:

  • File patterns - Config files, lock files, and tool-specific files (e.g., tailwind.config.js, .eslintrc, docker-compose.yml)
  • Import statements - Imports and requires in your source code
  • Configuration keys - Tool references in package.json, pyproject.toml, etc.
  • Directory structures - Tool-specific directories and conventions

This approach detects more than just npm packages—it finds Vercel, GitHub Actions, Docker, Tailwind CSS, and hundreds of other tools across all categories.

Commands

stackshare scan [directory]   # Scan a directory for tools (default command)
stackshare login [api-key]    # Authenticate with StackShare
stackshare logout             # Remove stored authentication

Scan Options

stackshare scan [directory] [options]

Options:
  -s, --stack <slug>     Sync to an existing stack by slug
  -S, --stack-name <n>   Stack name for new stacks
  -a, --all              Include all detected tools (not just primary)
  -n, --dry-run          Scan only, do not post
  -j, --json             Output JSON only
  -v, --verbose          Show matched files for each tool
  -y, --yes              Skip prompts, post automatically
  -r, --raw              Show all detections without deduplication

Example Output

$ stackshare scan

✔ Scanned 847 files in 234ms

Detected 18 primary tools (24 total):

  ▸ Application & Data
    ● TypeScript · Languages
    ● React · JavaScript Frameworks
    ● Next.js · Frameworks (Full Stack)
    ● Tailwind CSS · Front-End Frameworks

  ▸ DevOps
    ● Docker · Virtual Machine Platforms
    ● GitHub Actions · Continuous Integration

  ▸ Utilities
    ● ESLint · Code Review
    ● Prettier · Code Review
    ● Vitest · Testing Frameworks

? What would you like to do? › Post on StackShare

Authentication

Browser Authentication

When posting, the CLI opens a browser window for you to sign in. After authenticating, your API key is saved automatically.

API Key

Authenticate directly with an API key:

stackshare login <your-api-key>

Generate an API key from your account settings.

CI/CD

For automated pipelines, set the STACKSHARE_API_KEY environment variable:

export STACKSHARE_API_KEY=your-key-here
npx stackshare scan --yes --stack my-project

CI/CD Integration

Add automatic stack updates to your CI/CD pipeline:

GitHub Actions

# .github/workflows/update-stack.yml
name: Update StackShare

on:
  push:
    branches: [main]
    paths:
      - 'package.json'
      - 'pnpm-lock.yaml'
      - '*.config.*'
      - 'Dockerfile'

jobs:
  update-stack:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - run: npx stackshare scan --yes --stack my-project
        env:
          STACKSHARE_API_KEY: ${{ secrets.STACKSHARE_API_KEY }}

See the CI/CD Integration guide for GitLab CI, CircleCI, and Azure Pipelines examples.

What Gets Detected

The scanner identifies tools across all StackShare categories:

  • Languages & Frameworks - TypeScript, React, Next.js, Django, Rails
  • Build Tools - Webpack, Vite, esbuild, Turbopack
  • Testing - Jest, Vitest, Playwright, Cypress
  • Linting & Formatting - ESLint, Prettier, Biome
  • Data Stores - PostgreSQL, MongoDB, Redis, Prisma
  • DevOps & Infrastructure - Docker, Kubernetes, Terraform
  • CI/CD - GitHub Actions, CircleCI, GitLab CI
  • Hosting & Deployment - Vercel, AWS, Cloudflare
  • Monitoring & Analytics - Sentry, PostHog, Datadog
  • And many more...

Documentation

Full documentation available at stackshare.io/docs/cli

Feedback & Support

Email team@stackshare.io for bug reports, feature requests, or to request new tool detection.

Keywords

stackshare

FAQs

Package last updated on 01 Dec 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts