install-guard 1.0.0 → 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +9 -9
- package/bin/cli.js +1 -1
- package/install-guard-1.0.0.tgz +0 -0
- package/package.json +2 -2
package/README.md
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
# 🚨 Should You Trust That npm Package Before Installing?
|
|
2
2
|
|
|
3
|
-
**
|
|
3
|
+
**install-guard** analyzes npm packages and tells you if they are safe to install — before you install them.
|
|
4
4
|
|
|
5
5
|
---
|
|
6
6
|
|
|
@@ -8,7 +8,7 @@
|
|
|
8
8
|
<summary>Example</summary>
|
|
9
9
|
|
|
10
10
|
```bash
|
|
11
|
-
npx
|
|
11
|
+
npx install-guard install some-random-lib
|
|
12
12
|
```
|
|
13
13
|
|
|
14
14
|
```
|
|
@@ -42,7 +42,7 @@ You shouldn't have to guess if a package is safe.
|
|
|
42
42
|
|
|
43
43
|
## 🛡️ The Solution
|
|
44
44
|
|
|
45
|
-
|
|
45
|
+
install-guard gives you a **risk score before you install anything**.
|
|
46
46
|
|
|
47
47
|
---
|
|
48
48
|
|
|
@@ -51,26 +51,26 @@ dep-shield gives you a **risk score before you install anything**.
|
|
|
51
51
|
Check a package:
|
|
52
52
|
|
|
53
53
|
```bash
|
|
54
|
-
npx
|
|
54
|
+
npx install-guard axios
|
|
55
55
|
```
|
|
56
56
|
|
|
57
57
|
Safely install a package:
|
|
58
58
|
|
|
59
59
|
```bash
|
|
60
|
-
npx
|
|
60
|
+
npx install-guard install axios
|
|
61
61
|
```
|
|
62
62
|
|
|
63
63
|
Scan your project:
|
|
64
64
|
|
|
65
65
|
```bash
|
|
66
|
-
npx
|
|
66
|
+
npx install-guard scan
|
|
67
67
|
```
|
|
68
68
|
|
|
69
69
|
---
|
|
70
70
|
|
|
71
71
|
## 🧠 How Risk Score Works
|
|
72
72
|
|
|
73
|
-
|
|
73
|
+
install-guard analyzes:
|
|
74
74
|
|
|
75
75
|
- 📉 Weekly downloads (popularity)
|
|
76
76
|
- 🕒 Last update time
|
|
@@ -120,7 +120,7 @@ Risk: 8/10
|
|
|
120
120
|
|
|
121
121
|
## 🤔 Why not npm audit?
|
|
122
122
|
|
|
123
|
-
| Feature | npm audit |
|
|
123
|
+
| Feature | npm audit | install-guard |
|
|
124
124
|
|-----------------------|-----------|------------|
|
|
125
125
|
| Known vulnerabilities | ✅ | ✅ |
|
|
126
126
|
| Trust analysis | ❌ | ✅ |
|
|
@@ -132,7 +132,7 @@ Risk: 8/10
|
|
|
132
132
|
## 📦 Install globally
|
|
133
133
|
|
|
134
134
|
```bash
|
|
135
|
-
npm install -g
|
|
135
|
+
npm install -g install-guard
|
|
136
136
|
```
|
|
137
137
|
|
|
138
138
|
---
|
package/bin/cli.js
CHANGED
package/install-guard-1.0.0.tgz
CHANGED
|
Binary file
|