search

lirantal / lockfile-lint

Lint an npm or yarn lockfile to analyze and detect security issues
Apache License 2.0
781 stars 35 forks source link

File-based configuration #74

Closed mtlewis closed 4 years ago

mtlewis commented 4 years ago

First off, thanks for this super useful tool.

Is your feature request related to a problem? Please describe. Sharing lockfile-lint configuration is currently problematic, because the only way to configure it is via command-line arguments. If it were possible to store this configuration in a file, it would allow sharing that file amongst multiple repositories. It would also have the additional benefit of allowing commentary justifying the configuration choices made.

Describe the solution you'd like The solution should probably use a third-party library for loading config, to allow loading config from multiple conventional sources without a bunch of work.

Describe alternatives you've considered It would be possible to achieve a similar outcome by passing around scripts that wrap calls to lockfile-lint.

lirantal commented 4 years ago

Sounds like a great new feature, thanks for suggesting this @mtlewis 🎉