lirantal/npq

Issues

• Mapping existing API calls to Ecosyte.ms API

  #313 opened 3 months ago by lirantal
  0

• Transitive dependencies

  #312 opened 4 months ago by robatwilliams
  7

• Version maturity - the 'age' Marshall checks since package created. This feature is for new version published time difference.

  #311 opened 4 months ago by robatwilliams
  4

• Bug with resolving high-level versions

  #310 opened 5 months ago by lirantal
  0

• The typosquatting Marshall shows duplicate entries

  #309 opened 6 months ago by lirantal
  0

• Assess whether the package is developed by industry-accepted foundations (such as OpenJSF) or acclaimed individuals (like members of the Node.js core team)

  #308 opened 6 months ago by lirantal
  0

• npq offloading responsibilities to package manager (yarn)

  #307 opened 7 months ago by sherrylenegauci
  5

• Assess package evaluation criteria based on OpenSSF

  #302 opened 9 months ago by lirantal
  0

• Legacy "--save" option is not checked

  #300 opened 9 months ago by daniele-pini
  4

• Isolate installs inside a Docker-powered nsjail environment

  #295 opened a year ago by lirantal
  0

• Idea: verify matching tags and signed commit status

  #193 opened 3 years ago by lirantal
  2

• Feat: create marshall categories

  #292 opened a year ago by lirantal
  1

• Feat: release new major version dropping support for older Node.js runtimes

  #283 opened a year ago by lirantal
  1

• Feat: drop postinstall script and instead replace with bin cli command to install it on demand

  #285 opened a year ago by lirantal
  0

• Feat: create github action based on these marshalls

  #284 opened a year ago by lirantal
  0

• Feat: add debugging information for new signatures and provenance marshalls

  #282 opened a year ago by lirantal
  0

• Add Marshall check for package provenance

  #275 opened a year ago by lirantal
  1

• Add Marshall check for package signatures from registry

  #278 opened a year ago by lirantal
  1

• Add Marshall check for detecting potential typosquatting based on distance algorithm

  #274 opened a year ago by lirantal
  0

• Collaboration with Overlay

  #265 opened a year ago by baruchiro
  5

• Test is executed for missing packages

  #264 opened 2 years ago by patric-eberle
  3

• Idea: incorporate Snyk Advisor scores as parts of the marshalls

  #263 opened 2 years ago by lirantal
  0

• Fallback to Snyk's open/limited vulnerability check if API isn't available

  #216 opened 2 years ago by lirantal
  1

• scripts.marshall failing when installing a package without specific version

  #244 opened 2 years ago by baruchiro
  3

• Bug: replacing / happens only one time instead of globally

  #257 opened 2 years ago by lirantal
  0

• Add marshal check for expired domains

  #208 opened 2 years ago by lirantal
  0

• Support npm's (typo-)aliases for install

  #207 opened 2 years ago by baranor
  2

• Bug: package age would not exist if package doesn't exist

  #248 opened 2 years ago by lirantal
  1

• Bug: version uses "*" instead of "latest"

  #246 opened 2 years ago by lirantal
  1

• Fix double-encoding for URLs

  #206 opened 2 years ago by lirantal
  1

• Error when working with fnm

  #241 opened 2 years ago by lirantal
  2

• README - broken link

  #232 opened 2 years ago by memodyssey
  2

• --dry-run option not working

  #214 opened 2 years ago by shivankar-madaan
  2

• Add marshall check for validating/missing maintainer identity

  #211 opened 2 years ago by lirantal
  0

• Add marshall check for signals of maintainer list updates

  #210 opened 2 years ago by lirantal
  0

• Add marshall check for inactive maintainers

  #209 opened 2 years ago by lirantal
  0

• incorrect: package has no README file available

  #205 opened 3 years ago by OmgImAlexis
  2

• Installation fails with npm v7

  #185 opened 3 years ago by andronocean
  13

• Idea: Before installing a new version, we can check for new binaries or scripts introduced

  #195 opened 3 years ago by lirantal
  0

• Idea: before installing a new version check author change

  #194 opened 3 years ago by lirantal
  0

• Wrong version is used against Snyk API

  #188 opened 4 years ago by yoavain
  3

• Can't auth with snyk

  #183 opened 4 years ago by Khazl
  15

• All remote data is undefined

  #176 opened 4 years ago by omrilotan
  2

• Replace axios with node-fetch (or other?)

  #169 opened 4 years ago by lirantal
  2

• Unable to query the Snyk vulnerability database for @nestjs/cli

  #172 opened 4 years ago by xiniria
  2

• Check a repo's already installed packages

  #163 opened 4 years ago by xiniria
  3

• Bug: npq doesn't support the npm alias convention

  #152 opened 4 years ago by lirantal
  9

• `yarn global add npq` fails in 2.0.1

  #154 opened 4 years ago by taobojlen
  2

• Feature suggestion: advanced typosquatting detection

  #142 opened 4 years ago by taobojlen
  2

• Feature request: Check of README should be part of package maturity test

  #128 opened 4 years ago by spotlesscoder
  5