pmsec 0.4.0 → 0.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +1 -1
- package/package.json +2 -2
- package/src/cli.mjs +8 -3
package/README.md
CHANGED
|
@@ -28,7 +28,7 @@ npx --registry=https://registry.npmjs.org/ --min-release-age=0 pmsec check
|
|
|
28
28
|
uvx --index https://pypi.org/simple --exclude-newer-package pmsec=2099-01-01 pmsec check
|
|
29
29
|
```
|
|
30
30
|
|
|
31
|
-
Zero runtime dependencies, ESM, requires Node 22+.
|
|
31
|
+
Zero-config install-time supply-chain hardening (cooldown + audit-level + trust-policy + …) across npm, pnpm, yarn, bun, cargo, mise, uv. Zero runtime dependencies, ESM, requires Node 22+.
|
|
32
32
|
|
|
33
33
|
## Commands
|
|
34
34
|
|
package/package.json
CHANGED
|
@@ -1,10 +1,10 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "pmsec",
|
|
3
|
-
"version": "0.4.
|
|
3
|
+
"version": "0.4.1",
|
|
4
4
|
"publishConfig": {
|
|
5
5
|
"access": "public"
|
|
6
6
|
},
|
|
7
|
-
"description": "
|
|
7
|
+
"description": "Zero-config install-time supply-chain hardening for npm, pnpm, yarn, bun, cargo, mise, and uv.",
|
|
8
8
|
"homepage": "https://github.com/HikaruEgashira/pmsec#readme",
|
|
9
9
|
"repository": {
|
|
10
10
|
"type": "git",
|
package/src/cli.mjs
CHANGED
|
@@ -16,10 +16,15 @@ export const VERSION = JSON.parse(
|
|
|
16
16
|
|
|
17
17
|
const USAGE = `pmsec <command> [options]
|
|
18
18
|
|
|
19
|
+
Zero-config install-time supply-chain hardening across npm, pnpm, yarn,
|
|
20
|
+
bun, cargo, mise, uv. Each \`set\` writes the cooldown plus every safe-by-
|
|
21
|
+
default key the tool exposes (audit-level, trust-policy, hardened mode,
|
|
22
|
+
attestation re-verification, ...).
|
|
23
|
+
|
|
19
24
|
Commands:
|
|
20
|
-
check Inspect
|
|
21
|
-
set <DAYS> Apply DAYS-day cooldown to all selected tools
|
|
22
|
-
unset Remove cooldown
|
|
25
|
+
check Inspect hardening state (exit 1 if cooldown < --min or any extra unset)
|
|
26
|
+
set <DAYS> Apply DAYS-day cooldown + the hardening bundle to all selected tools
|
|
27
|
+
unset Remove the cooldown + hardening bundle from selected tools
|
|
23
28
|
|
|
24
29
|
Options:
|
|
25
30
|
--tool TOOL[,TOOL] Restrict to specific tools (npm,pnpm,yarn,bun,cargo,mise,uv)
|