bodicsek/npm-dependency-tree
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
A cli tool to create reports about the used 3rd party dependencies in an npm project.
40 commits 1 branch 8 tags 59 KiB
  • TypeScript 99.3%
  • JavaScript 0.7%
Find a file
Exact
bodicsek b7c316ef29 2.1.1
2021-04-28 10:56:52 +02:00
.vscode Adding vscode settings 2021-04-24 11:19:54 +02:00
bin Fixing bin/cli.js require 2021-04-23 06:59:48 +02:00
.gitignore Adding audit request to filtered nodes 2021-04-24 10:08:35 +02:00
.npmignore Fixing .npmignore 2021-04-24 11:31:36 +02:00
dependency-tree.ts Fixing oracle filter 2021-04-28 10:56:23 +02:00
LICENSE Adding LICENSE and README 2021-04-24 11:20:21 +02:00
package-lock.json 2.1.1 2021-04-28 10:56:52 +02:00
package.json 2.1.1 2021-04-28 10:56:52 +02:00
README.md Fixing README.md 2021-04-28 09:15:14 +02:00
tsconfig.json Initial commit 2021-04-22 14:18:52 +02:00

README.md

@os-tools/npm-dependency-tree

This tool's main purpose is to scan an npm project's dependency tree for Oracle Open Source Compliance.

Install

  1. Download and install nodejs from https://nodejs.org (LTS version is preferred).
  2. npm install -g --registry https://npm.bodicsek.host @os-tools/npm-dependency-tree

Usage

If you run it with the single required parameter --package then the result is (only packages eligible for compliance are shown):

$ npm-dependency-tree --package ./package.json 

name,version,root,parent,type,audit,expiry date,registered version,registered expiry date,last expired version,last expired expiry date
node-fetch,2.6.1,,,dependency,n/a,,,,,
yargs,16.2.0,,,dependency,n/a,,,,,
@types/node,14.14.41,,,devDependency,n/a,,,,,
@types/node-fetch,2.5.10,,,devDependency,n/a,,,,,
@types/yargs,16.0.1,,,devDependency,n/a,,,,,
ts-node,9.1.1,,,devDependency,n/a,,,,,
typescript,4.2.4,,,devDependency,n/a,,,,,

If you want audit results then run:

$ npm-dependency-tree --package ./package.json --audit

name,version,root,parent,type,audit,expiry date,registered version,registered expiry date,last expired version,last expired expiry date
@types/node-fetch,2.5.10,,,devDependency,not found,,,,,
@types/yargs,16.0.1,,,devDependency,not found,,,,,
@types/node,14.14.41,,,devDependency,not registered,,14.0.23,2022-07-30,7.0.67,2020-10-09
yargs,16.2.0,,,dependency,registered,2022-12-30,16.2.0,2022-12-30,4.8.1,2020-10-09
node-fetch,2.6.1,,,dependency,registered,2022-09-29,2.6.1,2022-09-29,2.5.0,2020-05-14
ts-node,9.1.1,,,devDependency,registered,2022-12-30,9.1.1,2022-12-30,7.0.1,2020-09-03
typescript,4.2.4,,,devDependency,not registered,,4.2.3,2023-03-30,2.5.2,2020-10-09

To get a sense of all the features run:

$ npm-dependency-tree --help

Options:
  --version  Show version number                                       [boolean]
  --package  The full or relative path to the package.json file
                                                             [string] [required]
  --format   Possible values are 'tree' and 'csv'      [string] [default: "csv"]
  --filter   Possible values are 'none' and 'oracle'[string] [default: "oracle"]
  --audit    Open Source Compliance Service audit     [boolean] [default: false]
  --help     Show help                                                 [boolean]