nodehunter 1.0.0 — first stable release
First stable release of nodehunter. CLI argv, --json envelopes, log channels, and exit codes are frozen going forward.
Docs: https://nodehunter.pages.dev
Install
# CLI
npm install -g nodehunter
# SDK (recommended for apps, CI, and libraries)
npm install @nodehunter/coreOn-demand:
npx nodehunter scan ~/Projects
pnpm dlx nodehunter --helpHighlights
- Safety by default — bare
nodehunterprints help;scanis read-only;deleteshows a sized preview and asks for confirmation (default no; use--yesonly when you mean it). - Workspace intelligence —
list,find,why, andinspect(duplicates, versions, largest, frameworks, drift, risks) across many projects in one scan. - Physical disk sizing —
sizeprefers nativeduon Linux/macOS; portable Node walk on Windows or with--no-du. - Machine output — global
--jsonwith stable envelopes (schemaVersion3,meta.apiVersion1.0.0) for scripts and CI. - Enrichment cache — fingerprinted cache via
CachePort(--no-cache,--force). - Terminal UX — OSC title, weighted progress, path hyperlinks, pinned footer (disabled under
--json/ CI). - Cross-platform — Linux, macOS, Windows (including WSL); CI matrix on all three.
- Publish — npm Trusted Publishing (OIDC) from GitHub Actions on
v*tags.
CLI commands
| Command | Purpose |
|---|---|
scan |
Find node_modules paths (read-only) |
size |
Measure disk usage |
list |
List projects or filter installs |
find |
Locate a package across the workspace |
why |
Explain package footprint |
inspect |
Analytics lenses (duplicates, drift, risks, …) |
delete |
Remove after preview + confirmation |
version |
Semver; --check (npm latest); --reset (update cache) |
help |
Command reference |
Packages
| npm package | What you get |
|---|---|
nodehunter |
Self-contained CLI (dist/cli.js — core compiled in at build time). Optional import from 'nodehunter/core' from the same tarball. |
@nodehunter/core |
Standalone SDK — recommended for programmatic use in apps, services, and CI. |
SDK
- Host-neutral
runScan,runSize,runList,runFind,runWhy,runInspect,runDelete* - Export tiers: stable / advanced / internal (
pnpm exec expgov validate) - Runnable examples under
examples/sdk/
Since v0.0.1
- Contract freeze for CLI argv,
--json, log channels, and exit codes - Trusted Publishing release workflow (independent, retry-safe jobs per package)
- Delete non-interactive smoke test (cross-platform CI)
- Maintainer shipped receipts reorganized under
maintainer/shipped/ - pnpm 11.13.1; production temp helpers async-only (clean tsup builds)
Requirements
- Node.js >= 18
Links
Full changelog: v0.0.1...v1.0.0