npmpackage.info

Gathering detailed insights and metrics for npm-audit-ci

Other packages similar to npm-audit-ci

npm-audit-ci-wrapper

3.0.2

A wrapper for 'npm audit' which can be configurable for use in a CI/CD tool like Jenkins

audit-ci

7.1.0

Audits NPM, Yarn, and PNPM projects in CI environments

yarn-audit-fix

10.1.0

The missing `yarn audit fix`

npm-audit-resolver

3.0.0-RC.0

Aids humans and automation in managing npm audit results

Gathering detailed insights and metrics for npm-audit-ci

npm-audit-ci

1.2.1

MIT

JavaScript

365,479 2.4

Installations

npm install npm-audit-ci

Pull Requests

Open

7

Total

20

Closed

1

Merged

12

Issues

Open

1

Total

5

Closed

4

Releases

v1.2.1

Published on 13 Jul 2019

v1.2.0

Published on 16 Apr 2019

v1.1.0

Published on 29 Dec 2018

View all 3 releases

Developer

revathskumar

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

No

Node Version

10.15.1

NPM Version

6.9.0 Statistics

18 Stars

40 Commits

7 Forks

3 Watching

8 Branches

7 Contributors

Updated on 04 Mar 2024

Languages

JavaScript (100%)

Total Downloads

Cumulative downloads

Total Downloads

365,479

Last day

33.8%

Compared to previous day

Last week

-10.3%

385

Compared to previous week

Last month

3.7%

1,714

Compared to previous month

Last year

-17.3%

23,723

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

yargs

Dev Dependencies

ava

Versions

npm audit ci

Commandline utility which exit the process with code 1, for the given criteria of vulnerabilities

Useful to make CI build fail when vulnerabilities are found or use to send alert using another tool.

Usage

npm install -g npm-audit-ci

› npm-audit-ci --help                    
Options:
  --version       Show version number                                  [boolean]
  -l, --low       Exit even for low vulnerabilities   [boolean] [default: false]
  -m, --moderate  Exit only when moderate or above vulnerabilities
                                                      [boolean] [default: false]
  -h, --high      Exit only when high or above vulnerabilities
                                                      [boolean] [default: false]
  -c, --critical  Exit only for critical vulnerabilities
                                                       [boolean] [default: true]
  -r, --report    Show npm audit report               [boolean] [default: false]
  --registry      Use the specified registry for npm audit. If you have
                  configured npm to point to a different default registry, such
                  as your internal private module repository, npm audit will
                  default to that registry when scanning. Pass a different
                  registry url in order to override this setting.       [string]
  --help          Show help                                            [boolean]

License

Please see License

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

5

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

2.4

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More