npmaargh 1.0.0 → 1.0.1

package/README.md

@@ -14,6 +14,15 @@ The report can be used to report blockers upstream or write more targeted
 
 ## Usage
 
+You can either install and run:
+
+```shell
+npm install --global npmaargh
+npmaargh [flags...] [target]
+```
+
+Or use `npx`:
+
 ```shell
 npx npmaargh [flags...] [target]
 ```
@@ -59,3 +68,10 @@ Let's unpack that report:
   tracker of `hello` is included to make it easy to report the blocker.
 - `world@0.1.0` is a transitive dependency of `hello@3.2.1`.
 - `# Need 1.1.1` indicates we need to bump it, because of a known vulnerability.
+
+## License
+
+This software is available under the `AGPL-3.0-or-later` license, see [LICENSE]
+for the full license text.
+
+[LICENSE]: ./LICENSE

package/index.js

@@ -69,7 +69,9 @@ async function npmList(subject) {
 	if (!npmListCache.has(subject)) {
 		async function fetch() {
 			const { stdout } = await exec(`npm list ${subject} --json`, { cwd: wd });
-			return JSON.parse(stdout);
+			const list = JSON.parse(stdout);
+			list.version ||= "1.0.0";
+			return list;
 		}
 
 		npmListCache.set(subject, fetch());
@@ -131,7 +133,7 @@ try {
 	try {
 		await exec("npm install --ignore-scripts", { cwd: wd });
 	} catch (error) {
-		console.error("Failed to (re)install dependencies:", error);
+		stdout.write("\rFailed to (re)install dependencies:", error);
 		exit(1);
 	}
 }
@@ -145,7 +147,7 @@ stdout.write("Obtaining audit report...");
 let npmAuditReport;
 try {
 	await exec("npm audit --json", { cwd: wd });
-	console.info("Nothing to audit.");
+	stdout.write("\rNothing to audit.        ");
 	exit(0);
 } catch (error) {
 	npmAuditReport = JSON.parse(error.stdout);
@@ -153,7 +155,7 @@ try {
 
 const reportVersion = npmAuditReport.auditReportVersion;
 if (reportVersion !== 2) {
-	console.error("Unknown audit report version:", reportVersion);
+	stdout.write("\rUnknown audit report version:", reportVersion);
 }
 
 stdout.write("\rObtained audit report.   \n");

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "npmaargh",
   "description": "The npm audit assistant",
-  "version": "1.0.0",
+  "version": "1.0.1",
   "license": "AGPL-3.0-or-later",
   "repository": {
     "type": "git",
@@ -31,6 +31,10 @@
   ],
   "type": "module",
   "bin": "./index.js",
+  "engines": {
+    "node": ">=24",
+    "npm": ">=11"
+  },
   "dependencies": {
     "semver": "^7.3.8"
   }