npmpackage.info

Gathering detailed insights and metrics for download-package-tarball

Other packages similar to download-package-tarball

get-tarball-cli

1.0.0

Download tarballs from npm using a package-lock.json file

tgz-package-downloader

1.0.10

download tarball from package-json

firebundle

0.1.6

A CLI tool that allows you to download npm packages as tarballs, including their dependencies recursively.

npm-package-downloader

0.1.6

If you need to mass download NPM packages for any reason (Like an offline storage) this is the package your looking for. The downloader downloads the specified packages as a tarball, ready to be used with npm storage solutions such as Sinopia. * Does no

Gathering detailed insights and metrics for download-package-tarball

download-package-tarball - 1.0.7 | npmpackage.info

download-package-tarball

Download a node package as a tarball, for example from github or npm

1.0.7

NOASSERTION

JavaScript

1.7

Installations

npm install download-package-tarball

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

8.6.0

NPM Version

5.3.0 Pull Requests

Open

7

Total

15

Closed

7

Merged

1

Issues

Open

1

Total

2

Closed

1

Releases

Unable to fetch releases

Languages

JavaScript

JavaScript (100%)

Developer

kesla

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

NOASSERTION License

4 Stars

27 Commits

4 Forks

12 Branches

1 Contributors

Updated on Mar 10, 2023

Maintainers

View All 1 Contributors

Package Meta Information

Latest Version

1.0.7

Package Id

download-package-tarball@1.0.7

Size

4.80 kB

NPM Version

5.3.0

Node Version

8.6.0

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

download-tarball fs-extra mkdirp-then npm-package-arg rimraf-then then-read-json then-tmp

Dev Dependencies

babel-cli babel-core babel-plugin-syntax-async-functions babel-plugin-transform-async-to-generator babel-preset-es2015-node4 babel-tape-runner http-test-server package-json-to-readme shx tapava tar-stream xo

download-package-tarball

Download a node package as a tarball, for example from github or npm

Installation

Download node at nodejs.org and install it, if you haven't already.

1npm install download-package-tarball --save

Usage

1/* eslint-disable import/no-extraneous-dependencies */
2
3import download from 'download-package-tarball';
4
5download({
6  // a npm tarball url will work
7  url: 'https://registry.npmjs.org/snappy/-/snappy-5.0.5.tgz',
8  dir: '/dir/where/file/will/be/downloaded'
9}).then(() => {
10  console.log('file is now downloaded!');
11}).catch(err => {
12  console.log('oh crap the file could not be downloaded properly');
13  console.log(err);
14});
15
16download({
17  // ... but also a github tarball url
18  url: 'https://api.github.com/repos/kesla/node-snappy/tarball/master',
19  dir: '/dir/where/file/will/be/downloaded',
20  // custom options that will be forwarded to got.stream(..., opts) can also be set
21  gotOpts: {
22    headers: {
23      beep: 'boop'
24    }
25  }
26}).then(() => {
27  console.log('file is now downloaded!');
28}).catch(err => {
29  console.log('oh crap the file could not be downloaded properly');
30  console.log(err);
31});
32
33download({
34  // or a tar file somewhere
35  url: 'http://link-to-tarball/file.tar',
36  dir: '/dir/where/file/will/be/downloaded'
37}).then(() => {
38  console.log('file is now downloaded!');
39}).catch(err => {
40  console.log('oh crap the file could not be downloaded properly');
41  console.log(err);
42});
43

Tests

1npm install
2npm test

Dependencies

download-tarball: Download a tarball (optionally gzipped) to a folder & extract it in the process. Uses the wonderful & super quick tar-fs & gunzip-maybe libraries.
fs-extra: fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as mkdir -p, cp -r, and rm -rf.
mkdirp-then: mkdirp as promised
npm-package-arg: Parse the things that can be arguments to npm install
rimraf-then: rimraf as promised
then-read-json: Read JSON file using promises
then-tmp: Promised version of the node.js tmp module.

Dev Dependencies

babel-cli: Babel command line.
babel-core: Babel compiler core.
babel-plugin-syntax-async-functions: Allow parsing of async functions
babel-plugin-transform-async-to-generator: Turn async functions into ES2015 generators
babel-preset-es2015-node4: Babel preset to make node@4 ES2015 compatible.
babel-tape-runner: Babel + Tape for running your ES Next tests
http-test-server: Create a simple http server for tests
package-json-to-readme: Generate a README.md from package.json contents
shx: Portable Shell Commands for Node
tapava: the syntax of ava, run through tape
tar-stream: tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.
xo: JavaScript happiness style linter ❤️

License

MIT

Generated by package-json-to-readme

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

License

Determines if the project has defined a license.

0

Maintained

Determines if the project is "actively maintained".

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

44 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-6chw-6frg-f759
Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx
Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
Warn: Project is vulnerable to: GHSA-ff7x-qrg7-qggm
Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
Warn: Project is vulnerable to: GHSA-8r6j-v8pm-fqw3
Warn: Project is vulnerable to: MAL-2023-462
Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
Warn: Project is vulnerable to: GHSA-qqgx-2p2h-9c37
Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q
Warn: Project is vulnerable to: GHSA-6c8f-qphg-qjgp
Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m
Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
Warn: Project is vulnerable to: GHSA-38h8-x697-gh8q
Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx
Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
Warn: Project is vulnerable to: GHSA-29xr-v42j-r956
Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
Warn: Project is vulnerable to: GHSA-c4w7-xm78-47vh

Score

1.7

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More