@westbayberry/dg 2.3.2 → 2.3.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +10 -0
- package/npm-shrinkwrap.json +2 -2
- package/package.json +2 -1
package/README.md
CHANGED
|
@@ -10,6 +10,16 @@ install is blocked before its install scripts execute, not flagged afterward.
|
|
|
10
10
|
It scans published package artifacts from the registry; your source code stays
|
|
11
11
|
on your machine.
|
|
12
12
|
|
|
13
|
+
## Who builds this
|
|
14
|
+
|
|
15
|
+
Dependency Guardian is built by Mckeane McBrearty at WestBayBerry. The CLI is
|
|
16
|
+
open source under Apache-2.0, and you can read every line at
|
|
17
|
+
https://github.com/WestBayBerry/DG_CLI. Releases publish from GitHub Actions
|
|
18
|
+
through npm's Trusted Publisher OIDC, never from a personal machine. The scanner
|
|
19
|
+
found a 37-package React Native campaign published by the npm account `sproger`
|
|
20
|
+
that had gone unreported for over a year; those findings are now in the OpenSSF
|
|
21
|
+
malicious-packages database (OSSF PR #1322).
|
|
22
|
+
|
|
13
23
|
## Install
|
|
14
24
|
|
|
15
25
|
```bash
|
package/npm-shrinkwrap.json
CHANGED
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@westbayberry/dg",
|
|
3
|
-
"version": "2.3.
|
|
3
|
+
"version": "2.3.3",
|
|
4
4
|
"lockfileVersion": 3,
|
|
5
5
|
"requires": true,
|
|
6
6
|
"packages": {
|
|
7
7
|
"": {
|
|
8
8
|
"name": "@westbayberry/dg",
|
|
9
|
-
"version": "2.3.
|
|
9
|
+
"version": "2.3.3",
|
|
10
10
|
"license": "Apache-2.0",
|
|
11
11
|
"dependencies": {
|
|
12
12
|
"chalk": "4.1.2",
|
package/package.json
CHANGED
|
@@ -1,7 +1,8 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@westbayberry/dg",
|
|
3
|
-
"version": "2.3.
|
|
3
|
+
"version": "2.3.3",
|
|
4
4
|
"description": "Dependency Guardian supply-chain firewall CLI",
|
|
5
|
+
"author": "Mckeane McBrearty <mckeane@westbayberry.com> (https://westbayberry.com)",
|
|
5
6
|
"keywords": [
|
|
6
7
|
"supply-chain-security",
|
|
7
8
|
"supply-chain",
|