grunt-requiresafe

Checks your package.json / npm-shrinkwrap.json against the requireSafe(+) API for dependencies with known vulnerabilities.

Getting Started

If you haven't used Grunt before, be sure to check out the Getting Started guide, as it explains how to create a Gruntfile as well as install and use Grunt plugins.

Once you're familiar with that process, you may install this plugin with this command:

npm install grunt-requiresafe --save-dev

Once the plugin has been installed, it may be enabled inside your Gruntfile with this line of JavaScript:

grunt.initConfig({
  requiresafe: {
    package: grunt.file.readJSON('package.json')
  }
});
 
grunt.loadNpmTasks('grunt-requiresafe');

Options

This package supports the following options.

package (object): The contents of a single package.json file [required]
shrinkwrap (object): The contents of a single npm-shrinkwrap.json file (optional, but is a much more efficient check)

Command Line Options

--package
Path to a package.json file
Example grunt requiresafe --package ./package.json

--shrinkwrap
Path to a npm-shrinkwrap.json file
Example grunt requiresafe --shrinkwrap ./npm-shrinkwrap.json