mitnick-cli 1.0.0 → 1.0.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +5 -5
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -13,13 +13,13 @@ npm supply chain attacks are escalating. In 2025 alone, packages like `debug` an
|
|
|
13
13
|
## Install
|
|
14
14
|
|
|
15
15
|
```bash
|
|
16
|
-
npm install -g mitnick
|
|
16
|
+
npm install -g mitnick-cli
|
|
17
17
|
```
|
|
18
18
|
|
|
19
19
|
Or use directly with npx:
|
|
20
20
|
|
|
21
21
|
```bash
|
|
22
|
-
npx mitnick check express
|
|
22
|
+
npx mitnick-cli check express
|
|
23
23
|
```
|
|
24
24
|
|
|
25
25
|
## Usage
|
|
@@ -135,14 +135,14 @@ Exit code `1` means findings were found at or above the threshold. Exit code `0`
|
|
|
135
135
|
|
|
136
136
|
```yaml
|
|
137
137
|
- name: Security check dependencies
|
|
138
|
-
run: npx mitnick check --fail-on medium $(cat package.json | jq -r '.dependencies | keys[]')
|
|
138
|
+
run: npx mitnick-cli check --fail-on medium $(cat package.json | jq -r '.dependencies | keys[]')
|
|
139
139
|
```
|
|
140
140
|
|
|
141
141
|
### SARIF upload to GitHub Security tab
|
|
142
142
|
|
|
143
143
|
```yaml
|
|
144
144
|
- name: Run mitnick
|
|
145
|
-
run: npx mitnick check --sarif express > results.sarif
|
|
145
|
+
run: npx mitnick-cli check --sarif express > results.sarif
|
|
146
146
|
|
|
147
147
|
- name: Upload SARIF
|
|
148
148
|
uses: github/codeql-action/upload-sarif@v3
|
|
@@ -158,7 +158,7 @@ Exit code `1` means findings were found at or above the threshold. Exit code `0`
|
|
|
158
158
|
|
|
159
159
|
```bash
|
|
160
160
|
# Clone and install
|
|
161
|
-
git clone https://github.com/
|
|
161
|
+
git clone https://github.com/muratdemirci/mitnick.git
|
|
162
162
|
cd mitnick
|
|
163
163
|
npm install
|
|
164
164
|
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "mitnick-cli",
|
|
3
|
-
"version": "1.0.
|
|
3
|
+
"version": "1.0.1",
|
|
4
4
|
"description": "Pre-install security analysis CLI for npm packages. Analyze packages before installation to detect vulnerabilities, malicious code, typosquatting, and supply chain attacks.",
|
|
5
5
|
"type": "module",
|
|
6
6
|
"main": "dist/index.js",
|