Figure out if the repo comes with an NPM package

balena-io-modules / scrutinizer

Extract a git repository's metadata relying on open source conventions

Apache License 2.0

8 stars 0 forks source link

Open dimitrisnl opened 5 years ago

dimitrisnl commented 5 years ago

edit: Detectorist checks for the existence of private: true in package.json, which doesn't guarantee that it's an actual published NPM package.

dimitrisnl commented 5 years ago

@jviotti Just to clarify is that check enough for us, or do we want to verify that there is at least one published version?

jviotti commented 5 years ago

@dimitrisnl The algorithm should be:

If private: true then don't bother checking NPM as we can assume its not in there
Else, check NPM and pull all the info you can from them, such as published versions, dates, dependees, etc. Basically check the NPM API, and if there is something they return that looks interesting, add it