Skip to content

Releases: boredchilada/npmtastic

Release list

v0.1.1

v0.1.1 Latest
Latest

Choose a tag to compare

View all tags
@boredchilada boredchilada released this 08 Jun 02:27
v0.1.1
6ab461b

Patch release.

Fixed

  • update: the isolated test install no longer fails with spawn EINVAL on Windows. The package-manager .cmd shim is now spawned through the shell, which Node requires since the CVE-2024-27980 fix.

Install from GitHub; requires Node >= 20. AGPL-3.0-or-later.

Assets 2
Loading

v0.1.0

v0.1.0

Choose a tag to compare

View all tags
@boredchilada boredchilada released this 03 Jun 01:15
v0.1.0
67f0d5c

Initial release of npmtastic, a Node.js dependency auditor and the npm-side counterpart to piptastic.

Commands

  • audit: report pin posture, registry drift, and known CVEs (OSV, with an optional npm-audit cross-check). Terminal, JSON (schemaVersion 1), and SARIF output; CI gates; accepted-risk suppressions.
  • update: pin or upgrade dependencies with a CVE-aware floor, a backup, an isolated test install, and rollback on failure.
  • bootstrap: reconstruct a package.json from the lockfile root, or freeze node_modules.

Install

Not on npm yet. Requires Node >= 20.

npm i github:boredchilada/npmtastic
# or: git clone, npm install, npm run build

AGPL-3.0-or-later.

Loading