npq 3.5.2 → 3.5.4
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +19 -4
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -8,13 +8,10 @@
|
|
|
8
8
|
[](https://www.npmjs.com/package/npq)
|
|
9
9
|
[](https://www.npmjs.com/package/npq)
|
|
10
10
|
[](https://codecov.io/gh/lirantal/npq)
|
|
11
|
-
[](https://github.com/lirantal/npq/actions/workflows/main.yml)
|
|
12
12
|
[](https://snyk.io/test/github/lirantal/npq)
|
|
13
13
|
[](./SECURITY.md)
|
|
14
14
|
|
|
15
|
-
|
|
16
|
-
[](https://snyk.io/advisor/npm-package/npq)
|
|
17
|
-
|
|
18
15
|

|
|
19
16
|
|
|
20
17
|
|
|
@@ -111,6 +108,24 @@ Example, to disable the Snyk vulnerability marshall:
|
|
|
111
108
|
MARSHALL_DISABLE_SNYK=1 npq install express
|
|
112
109
|
```
|
|
113
110
|
|
|
111
|
+
#### Available Marshall Environment Variables
|
|
112
|
+
|
|
113
|
+
Here are all the available environment variable names for disabling specific marshalls:
|
|
114
|
+
|
|
115
|
+
| Marshall Name | Environment Variable | Description |
|
|
116
|
+
| --- | --- | --- |
|
|
117
|
+
| age | `MARSHALL_DISABLE_AGE` | Disable package age checks |
|
|
118
|
+
| author | `MARSHALL_DISABLE_AUTHOR` | Disable package author verification |
|
|
119
|
+
| downloads | `MARSHALL_DISABLE_DOWNLOADS` | Disable download count checks |
|
|
120
|
+
| expired domains | `MARSHALL_DISABLE_MAINTAINERS_EXPIRED_EMAILS` | Disable expired domain checks for maintainer emails |
|
|
121
|
+
| license | `MARSHALL_DISABLE_LICENSE` | Disable license availability checks |
|
|
122
|
+
| provenance | `MARSHALL_DISABLE_PROVENANCE` | Disable package provenance verification |
|
|
123
|
+
| repo | `MARSHALL_DISABLE_REPO` | Disable repository URL validation |
|
|
124
|
+
| scripts | `MARSHALL_DISABLE_SCRIPTS` | Disable pre/post install script checks |
|
|
125
|
+
| signatures | `MARSHALL_DISABLE_SIGNATURES` | Disable registry signature verification |
|
|
126
|
+
| snyk | `MARSHALL_DISABLE_SNYK` | Disable Snyk vulnerability checks |
|
|
127
|
+
| typosquatting | `MARSHALL_DISABLE_TYPOSQUATTING` | Disable typosquatting detection |
|
|
128
|
+
|
|
114
129
|
### Run checks on package without installing it:
|
|
115
130
|
|
|
116
131
|
```sh
|