Home Original page

GitHub - mcandre/periscope: NPM/Yarn dependency scope linter

NPM Downloads Yarn Test license

yellow submarine

EXAMPLES

$ cd examples

$ cd hello-npm

$ periscope .
warning: unscoped publication name "hello-npm" vulnerable to spoofing: package.json
warning: unscoped dependency name "express" vulnerable to spoofing: package.json
warning: unscoped dependency name "redis" vulnerable to spoofing: package.json

See periscope -h for more options.

ABOUT

NPM provides scoped package names using an at sign (@) prefix. Scoped names are safer than classical names. For example, anyone can publish packages with names similar to redis, but only authorized members of the scope are allowed to publish packages with the @redis/ namespace.

periscope automates scanning large, complex projects to identify first party and third party code that uses unscoped package names.

INSTALLATION

See INSTALL.md.

LICENSE

BSD-2-Clause

Optional

SEE ALSO

  • booty, a task runner convention for ECMAScript/JavaScript/Node.js/altJS projects
  • linters, a wiki of common programming language linters and SAST tools
  • stank, a collection of shell script linter utilities
  • unmake, a linter for makefiles

🤿