pkgjs-audit1

Overview

Usage: pkgjs-audit <installed-module> # OR # pkgjs-audit -s <module> <version>

Unless -s option is used, pkgjs-audit searches for a pkgjs-lock.json file, if not found, it builds a temporary package-lock.json file using (dev)dependencies. Then it launches a "npm audit" using these files. This permits one to check vulnerabilities in case of bundled package.

If <module> is given, pkgjs-audit uses installed module, else it launch audit using current directory.

Options

-s: just query npmjs.org registry with a module name and its version