A tool for sneaking around your filesystem to find the installed npm deps you asking for.
It happens that popular npm packages are got compromised and you have to be sure that you don't have one installed on your machine. Fazio does the job.
$ npm install -g @funboxteam/fazio
$ fazio -p '[email protected] || 0.8.0 || 1.0.0' -d ~
You may pass as many packages to search for, and as many directories to look through as you want using -p
& -d
flags:
$ fazio -p 'chokidar@2' -p 'fsevents@<2' -d ~/projects -d ~/work
By default Fazio also checks the globally installed deps. If you want to skip it, pass --no-global-check
flag.
You can use the package via npx without installing the Fazio globally:
$ npx @funboxteam/fazio --package '[email protected] || 0.8.0 || 1.0.0' --directory ~ --verbose
npx: installed 5 in 0.908s
Directories to scan:
/home/ai
/home/ai/.nvm/versions/node/v14.18.0/lib
× /home/ai/freelance/important-project/node_modules/[email protected]
× /home/ai/work/homepage/node_modules/[email protected]
→ /home/ai/projects/sandbox/node_modules/[email protected]
× /home/ai/projects/igoradamenko.com/node_modules/[email protected]
1 package found.
3 packages omitted.