Gathering detailed insights and metrics for which-pm-runs-cli
Gathering detailed insights and metrics for which-pm-runs-cli
Detects what package manager executes the process from CLI
Installations
npm install which-pm-runs-cliDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Score
52.9
Supply Chain
57.4
Quality
74.1
Maintenance
50
Vulnerability
100
License
Releases
Unable to fetch releases
Languages
1
JavaScript
JavaScript (100%)
Developer
FezVrasta
Download Statistics
Total Downloads
12,318
Last Day
3
Last Week
10
Last Month
59
Last Year
798
GitHub Statistics
1 Stars
1 Commits
2 Forks
2 Watchers
2 Branches
1 Contributors
Updated on Jul 09, 2019
Bundle Size
88.75 kB
Minified
28.82 kB
Minified + Gzipped
Maintainers
1
Package Meta Information
Latest Version
1.0.5
Package Id
which-pm-runs-cli@1.0.5
Size
740.00 B
Total Downloads
Cumulative downloads
Total Downloads
12,318
Dependencies
2
which-pm-runs-cli
Easily know which package manager is running your package.json scripts.
Usage
yarn add --dev which-pm-runs-cli
{
"scripts": {
"preinstall": "which-pm-runs --is yarn || echo 🛑 Yarn is required to setup this project!"
}
}
❯ npm install
[...]
npm ERR! code ELIFECYCLE
❯ echo $?
1
❯ yarn install
[...]
❯ echo $?
0
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
5 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-4xcv-9jjx-gfj3
- Warn: Project is vulnerable to: GHSA-c4w7-xm78-47vh
- Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
Reason
Found 0/1 approved changesets -- score normalized to 0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
license file not detected
Details
- Warn: project does not have a license file
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Score
2
/10
Last Scanned on 2025-05-05
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More