Gathering detailed insights and metrics for dmg-license
Gathering detailed insights and metrics for dmg-license
Gathering detailed insights and metrics for dmg-license
Gathering detailed insights and metrics for dmg-license
Generate license agreements for macOS .dmg files
npm install dmg-license
Typescript
Module System
Min. Node Version
Node Version
NPM Version
95.7
Supply Chain
87.3
Quality
75
Maintenance
100
Vulnerability
99.6
License
TypeScript (98.2%)
Java (1.56%)
JavaScript (0.24%)
Total Downloads
27,746,922
Last Day
17,728
Last Week
102,923
Last Month
442,082
Last Year
4,920,836
MIT License
22 Stars
191 Commits
7 Forks
3 Watchers
3 Branches
2 Contributors
Updated on May 14, 2025
Latest Version
1.0.11
Package Id
dmg-license@1.0.11
Unpacked Size
90.98 kB
Size
23.99 kB
File Count
36
NPM Version
8.1.0
Node Version
16.13.0
Cumulative downloads
Total Downloads
Last Day
-16.3%
17,728
Compared to previous day
Last Week
2.7%
102,923
Compared to previous week
Last Month
3.7%
442,082
Compared to previous month
Last Year
-24.1%
4,920,836
Compared to previous year
A TypeScript/JavaScript library and command-line tool for attaching license agreements to macOS .dmg
files, which the user must accept before mounting the disk image. Doing this correctly is surprisingly complicated, so this package is here to automate it.
Warning: Attaching license agreements to disk images may become impossible in future versions of macOS. It is done using the hdiutil udifrez
command, which is deprecated as of macOS 12 with no apparent replacement. See issue #11 for details.
dmg-license
itself is provided under the terms of the MIT license. You can find the text of the MIT license in the LICENSE file.
Although this package is mainly intended for use by .dmg
-generating tools like node-appdmg, it can also be used by itself from the command line, to attach a license agreement to an existing .dmg
file.
You can install this package and use the command-line tool by running npm install --global dmg-license
. This will add a dmg-license
command to your system.
Alternatively, you can run it without installing, using npx dmg-license
. Note that running it this way is relatively slow.
Usage: dmg-license [options…] json-path dmg-path
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
license file detected
Details
Reason
9 existing vulnerabilities detected
Details
Reason
Found 1/20 approved changesets -- score normalized to 0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
Reason
project is not fuzzed
Details
Reason
branch protection not enabled on development/release branches
Details
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
Score
Last Scanned on 2025-05-12
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More