npmpackage.info

Gathering detailed insights and metrics for global-modules-path

Other packages similar to global-modules-path

global-modules

2.0.0

The directory used by npm for globally installed npm modules.

global-prefix

4.0.0

Get the npm global path prefix.

global-dirs

4.0.0

Get the directory of globally installed packages and binaries

resolve-dir

1.0.1

Resolve a directory that is either local, global or in the user's home directory.

Gathering detailed insights and metrics for global-modules-path

global-modules-path - 3.0.0 | npmpackage.info

global-modules-path

Returns path to globally installed package

3.0.0

Apache-2.0

JavaScript

0.99 kB

91,549,499 3.6

Installations

npm install global-modules-path

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

14.18.1

NPM Version

6.14.15 Score

99.4

Supply Chain

76.5

Quality

79.5

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

1

Total

17

Closed

4

Merged

12

Issues

Open

1

Total

3

Closed

2

Releases

v3.0.0

Updated on Jan 08, 2023

v2.3.1

Updated on Nov 30, 2018

v2.3.0

Updated on Jul 20, 2018

v2.2.0

Updated on Jul 19, 2018

v2.1.0

Updated on Mar 22, 2018

v2.0.0

Updated on Jun 29, 2017

View All 7 releases

Languages

JavaScript

Shell

Batchfile

JavaScript (98.64%)

Shell (0.69%)

Batchfile (0.66%)

Developer

rosen-vladimirov

Download Statistics

Total Downloads

91,549,499

Last Day

1,814

Last Week

50,823

Last Month

225,661

Last Year

3,099,814

GitHub Statistics

Apache-2.0 License

1 Stars

40 Commits

2 Forks

2 Watchers

3 Branches

4 Contributors

Updated on Jan 04, 2023

Bundle Size

2.36 kB

Minified

0.99 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 4 Contributors

Package Meta Information

Latest Version

3.0.0

Package Id

global-modules-path@3.0.0

Unpacked Size

20.86 kB

Size

6.95 kB

File Count

NPM Version

6.14.15

Node Version

14.18.1

Published on

Jan 08, 2023

Total Downloads

Cumulative downloads

Total Downloads

91,549,499

Last Day

0.3%

1,814

Compared to previous day

Last Week

5.3%

50,823

Compared to previous week

Last Month

5.2%

225,661

Compared to previous month

Last Year

-30.9%

3,099,814

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

chai eslint istanbul mocha spec-xunit-file

global-modules-path

Returns path to globally installed package.

System requirements

In order to use this package you need:

Node.js 4.0.0 or later
npm 2.0.0 or later added to your PATH environment variable (you should be able to execute npm --version from your default terminal).

Usage

The module has a single public method called getPath. It requires at least one argument - the name of the globally installed package that you need. In case the package is not installed, getPath will return null. getPath will throw error in case the OS is NOT supported. Supported OS are:

Windows (process.platform returns win32)
macOS (process.platform returns darwin)
Linux (process.platform returns linux)

Using getPath with single argument

Example:

let pathToPackage = require("global-modules-path").getPath("packageName");

The method returns the path to globally installed package or null. The code constructs the path based on the result of npm config get prefix and checks if the package exists.

Using getPath with package name and executable name.

Example:

let pathToPackage = require("global-modules-path").getPath("packageName", "executableName");

The method returns the path to globally installed package or null. The code constructs the path based on the result of npm config get prefix and checks if the package exists. In case the package cannot be found in this way, the executableName is used to determine if the package is globally installed.

On Windows the package spawns where executableName command and parses the result.
On macOS and Linux the package spawns ls -l executableName and which executableName and parses the results.

NOTE: In some cases the executable name is not the same as the package name.

Critical

9.8/10

Summary

global-modules-path Command Injection vulnerability

Affected Versions

< 3.0.0

Patched Versions

3.0.0

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

7

SAST

Determines if the project uses static code analysis.

4

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

1

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Signed-Releases

Determines if the project cryptographically signs release artifacts.

Score

3.6

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More