sandstorm-io/sandcats

Detect when our packages.json file gets out of date, so that we can handle e.g. security updates in a timely fashion

Opened this issue · 4 comments

paulproteus commented

Hey @treyhunner -- this repo contains a packages.json file, and I think you know things about npm-land.

Is there, like, a web service I can subscribe to, that will email me when my packages.json file depends on things that are out of date?

paulproteus commented

This repo is an open source dynamic DNS server and other-things toolbox that runs on the https://sandcats.io/ URL as a free service to users of Sandstorm.io, fwiw.

treyhunner commented

I don't use many services like this, but I know about https://gemnasium.com

I believe that one works with Node/JS projects, but there might be better competing services at this point.

strugee commented

@paulproteus https://greenkeeper.io/ is probably what you're looking for, or maybe https://nodesecurity.io/

ocdtrekkie commented

The Wekan repo has Greenkeeper.io enabled if you want an example of what it does, check the PR tab. It gets kinda spammy if the maintainer isn't actively merging the PRs, mind you.