npm-audit-tree
v1.1.0
Published
Display npm audit vulnerabilities with their dependency trees
Downloads
1,074
Maintainers
simonerlandsenReadme
npm-audit-tree
Display npm audit vulnerabilities with their dependency trees, so you can see which of your direct dependencies pulls in vulnerable packages.
Installation
npm install -g npm-audit-treeUpgrading
npm uninstall -g npm-audit-tree && npm install -g npm-audit-treeNote: npm update -g may not work correctly as it doesn't always run postinstall scripts.
Usage
Run in a directory containing a package.json:
npm-audit-treeFilter by severity:
npm-audit-tree critical # Show only critical vulnerabilities
npm-audit-tree high # Show only high severity
npm-audit-tree moderate # Show only moderate severity
npm-audit-tree low # Show only low severityShow help:
npm-audit-tree --helpShow version:
npm-audit-tree --versionExample Output
=== lodash (critical) ===
Prototype Pollution in lodash - https://github.com/advisories/GHSA-p6mc-m468-83gw
[email protected]
└── [email protected]
└── [email protected]
=== minimatch (high) ===
minimatch ReDoS vulnerability - https://github.com/advisories/GHSA-f8q6-p94x-37v3
[email protected]
└── [email protected]
└── [email protected]Building from Source
cargo build --releaseLicense
MIT