Installations

npm install snyk-try-require

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

16.6.2

NPM Version

7.20.6 Score

98.8

Supply Chain

68.1

Quality

77.9

Maintenance

100

Vulnerability

99.6

License

Pull Requests

Open

0

Total

25

Closed

4

Merged

21

Issues

Open

0

Total

0

Closed

0

Releases

9

v2.0.2

Updated on Aug 16, 2021

v2.0.1

Updated on Oct 19, 2020

v2.0.0

Updated on Jul 20, 2020

v1.3.1

Updated on Jun 12, 2018

v1.3.0

Updated on Apr 28, 2018

v1.2.0

Updated on Nov 28, 2016

View All 9 releases

Contributors

22

Unable to fetch Contributors

View All 22 Contributors

Languages

1

JavaScript

JavaScript (100%)

Love this project? Help keep it running — sponsor us today! 🚀

Developer

Snyk

Download Statistics

Total Downloads

62,899,423

Last Day

24,249

Last Week

110,025

Last Month

375,248

Last Year

4,304,851

GitHub Statistics

Apache-2.0 License

4 Stars

56 Commits

6 Forks

90 Watchers

1 Branches

22 Contributors

Updated on Oct 29, 2024

Bundle Size

24.21 kB

Minified

8.29 kB

Minified + Gzipped

Bundlephobia

Maintainers

2

Package Meta Information

Latest Version

2.0.2

Package Id

snyk-try-require@2.0.2

Size

8.27 kB

NPM Version

7.20.6

Node Version

16.6.2

Published on

Aug 16, 2021

Total Downloads

Cumulative downloads

Total Downloads

62,899,423

Last Day

66.2%

24,249

Compared to previous day

Last Week

8.3%

110,025

Compared to previous week

Last Month

64.9%

375,248

Compared to previous month

Last Year

-1.5%

4,304,851

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

3

debug lodash.clonedeep lru-cache

Dev Dependencies

3

eslint tap tap-only

Snyk's (try) require

This package tries to load and parse a package.json file. This does not load the package into memory (as per require).

What snyk-try-require does:

Returns a promise
Does not throw if the package.json can't be found, but fulfills with null
Uses debug module under the snyk:resolve:try-require key
Uses lru-cache for caching for 100 objects for 1 hour
Adds dependencies and devDependencies if they're missing
Adds __filename containing the full original path to the package
If a Snyk policy is present, will add the path of the policy to the snyk property
If the package uses npm-shrinkwrap.json will include a shrinkwrap boolean property
Returns the leading and trailing whitespace of the original package.json file as a leading and trailing property respectively

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

9

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

4.7

/10

Last Scanned on 2025-02-10

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More