npmpackage.info

Gathering detailed insights and metrics for global-modules-path

Other packages similar to global-modules-path

global-modules

2.0.0

The directory used by npm for globally installed npm modules.

global-prefix

4.0.0

Get the npm global path prefix.

global-dirs

4.0.0

Get the directory of globally installed packages and binaries

resolve-dir

1.0.1

Resolve a directory that is either local, global or in the user's home directory.

Gathering detailed insights and metrics for global-modules-path

global-modules-path

Returns path to globally installed package

3.0.0

Apache-2.0

JavaScript

0.99 kB

90,664,990 3.8

Installations

npm install global-modules-path

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

14.18.1

NPM Version

6.14.15 Pull Requests

Open

1

Total

17

Closed

4

Merged

12

Issues

Open

1

Total

3

Closed

2

Releases

v3.0.0

Published on 08 Jan 2023

v2.3.1

Published on 30 Nov 2018

v2.3.0

Published on 20 Jul 2018

v2.2.0

Published on 19 Jul 2018

v2.1.0

Published on 22 Mar 2018

v2.0.0

Published on 29 Jun 2017

View all 7 releases

Contributors

Unable to fetch Contributors

View all 4 contributors

Languages

JavaScript

Shell

Batchfile

JavaScript (98.64%)

Shell (0.69%)

Batchfile (0.66%)

Developer

rosen-vladimirov

Download Statistics

Total Downloads

90,664,990

Last Day

13,020

Last Week

44,249

Last Month

201,735

Last Year

3,254,041

GitHub Statistics

1 Stars

40 Commits

2 Forks

3 Watching

3 Branches

4 Contributors

Bundle Size

2.36 kB

Minified

0.99 kB

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

3.0.0

Package Id

global-modules-path@3.0.0

Unpacked Size

20.86 kB

Size

6.95 kB

File Count

NPM Version

6.14.15

Node Version

14.18.1

Publised On

08 Jan 2023

Total Downloads

Cumulative downloads

Total Downloads

90,664,990

Last day

51%

13,020

Compared to previous day

Last week

-0.4%

44,249

Compared to previous week

Last month

14.1%

201,735

Compared to previous month

Last year

-43.3%

3,254,041

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

chai eslint istanbul mocha spec-xunit-file

Versions

global-modules-path

Returns path to globally installed package.

System requirements

In order to use this package you need:

Node.js 4.0.0 or later
npm 2.0.0 or later added to your PATH environment variable (you should be able to execute npm --version from your default terminal).

Usage

The module has a single public method called getPath. It requires at least one argument - the name of the globally installed package that you need. In case the package is not installed, getPath will return null. getPath will throw error in case the OS is NOT supported. Supported OS are:

Windows (process.platform returns win32)
macOS (process.platform returns darwin)
Linux (process.platform returns linux)

Using getPath with single argument

Example:

let pathToPackage = require("global-modules-path").getPath("packageName");

The method returns the path to globally installed package or null. The code constructs the path based on the result of npm config get prefix and checks if the package exists.

Using getPath with package name and executable name.

Example:

let pathToPackage = require("global-modules-path").getPath("packageName", "executableName");

The method returns the path to globally installed package or null. The code constructs the path based on the result of npm config get prefix and checks if the package exists. In case the package cannot be found in this way, the executableName is used to determine if the package is globally installed.

On Windows the package spawns where executableName command and parses the result.
On macOS and Linux the package spawns ls -l executableName and which executableName and parses the results.

NOTE: In some cases the executable name is not the same as the package name.

Stable Version

3.0.0

CRITICAL

9.8/10

Summary

global-modules-path Command Injection vulnerability

Affected Versions

< 3.0.0

Patched Versions

3.0.0

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

7

SAST

Determines if the project uses static code analysis.

6

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

1

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Maintained

Determines if the project is "actively maintained".

0

Security-Policy

Determines if the project has published a security policy.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

0

Signed-Releases

Determines if the project cryptographically signs release artifacts.

Score

3.8

/10

Last Scanned on 2025-01-27

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More