check-npm-maintainers
v1.0.0
Published
Check transitive maintainers
Readme
check-npm-maintainers
Check transitive npm maintainers of all dependencies in a project.
Reports packages where:
- A key owner is missing from the maintainers
- Maintainers include people not in the trusted owners list
- All maintainers are external (no trusted or key owners)
Install
npm i -g check-npm-maintainers@latestUsage
Create a trusted owners file (one username per line):
npm-username-1
npm-username-2Then run from a project directory with a package.json:
check-npm-maintainers owners.txtOptions
--prod Only check production dependencies
--key-owner <username> Key owners to verify (can be repeated)Examples
Check only production dependencies:
check-npm-maintainers --prod owners.txtCheck with multiple key owners:
check-npm-maintainers --key-owner npm-username-1 --key-owner npm-username-2 owners.txt