NullVoxPopuli / dependency-maintainers

How much power do the maintainers of your dependencies have? Allows folks to audit who has access to publishing.
GNU General Public License v3.0
33 stars 0 forks source link

Dependency Maintainers

(aka depmain)

Who maintains your project?

This tool recurses through your project's node_modules and gathers the maintainers, people with publish access on npm, and lists them out with a total of how many projects you use that they have access to.

For example:

$ npx dependency-maintainers@latest

  Number of maintainers: 333
  Number of packages: 462

┌─────────┬─────────────────────────────┬────────────┐
│ (index) │ NPM Name                    │ # Packages │
├─────────┼─────────────────────────────┼────────────┤
│ 0       │ 'ljharb'                    │ 80         │
│ 1       │ 'sindresorhus'              │ 53         │
│ 2       │ 'nicolo-ribaudo'            │ 32         │
│ 3       │ 'jlhwung'                   │ 31         │
│ 4       │ 'existentialism'            │ 31         │
│ 5       │ 'hzoo'                      │ 31         │
│ 6       │ 'isaacs'                    │ 27         │
│ 7       │ 'gar'                       │ 25         │
│ 8       │ 'fritzy'                    │ 25         │
│ 9       │ 'lukekarrys'                │ 23         │
│ 10      │ 'saquibkhan'                │ 23         │
...

Arguments / Flags

--recursive, -r     In a monorepo, find the montainers of every (package in the monorepo)'s (dev)dependencies

                      npx dependency-maintainers --recursive

--verbose, -v       Print extra logging to stdout

                      npx dependency-maintainers --verbose

--force             Force a cache refresh

                      npx dependency-maintainers --force

--help, -h          show this message

                      npx dependency-maintainers --help