npmpackage.info

Gathering detailed insights and metrics for eslint-plugin-package-json-dependencies

eslint-plugin-package-json-dependencies

An ESLint plugin for package-json dependencies, for both JS and TS projects.

1.0.20

MIT

TypeScript

857,614 3.6

Installations

npm install eslint-plugin-package-json-dependencies

Pull Requests

Open

0

Total

12

Closed

1

Merged

11

Issues

Open

0

Total

8

Closed

8

Releases

Unable to fetch releases

Developer

idan-at

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

No

Node Version

16.17.0

NPM Version

8.15.0 Statistics

15 Stars

85 Commits

3 Forks

1 Watching

1 Branches

4 Contributors

Updated on 17 Nov 2024

Languages

TypeScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

857,614

Last day

-33.2%

1,239

Compared to previous day

Last week

1.9%

7,666

Compared to previous week

Last month

-8.6%

33,661

Compared to previous month

Last year

-13.6%

364,355

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

comment-json esprima lodash micromatch semver

Dev Dependencies

@types/dedent @types/eslint @types/esprima @types/estree @types/jest @types/lodash @types/micromatch @types/node @types/semver dedent eslint eslint-plugin-self jest ts-jest ts-node typescript

Versions

eslint-plugin-package-json-dependencies

This plugin contains rules for maintaining a valid, consistent package.json dependency setup.

Installation

1npm install --save-dev eslint eslint-plugin-package-json-dependencies

Usage

Add the plugin and its parser to your eslint config file overrides section:

1// eslintrc.json
2{
3  "overrides": [
4    {
5      "files": ["*.json"],
6      "parser": "eslint-plugin-package-json-dependencies",
7      "plugins": ["package-json-dependencies"]
8    }
9  ]
10}

Apply the specific rules applicable to your repo, e.g.:

1// eslintrc.json
2{
3  "rules": {
4    "package-json-dependencies/no-missing-types": "error"
5  }
6}

Available Rules

Development

npm install
npm test
npm run format

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

9

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

3.6

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More