Skip to content
/ fazio Public

A tool to find an npm dep somewhere on your filesystem

License

Notifications You must be signed in to change notification settings

funbox/fazio

Repository files navigation

fazio

npm

A tool for sneaking around your filesystem to find the installed npm deps you asking for.

Rationale

It happens that popular npm packages are got compromised and you have to be sure that you don't have one installed on your machine. Fazio does the job.

Installation

$ npm install -g @funboxteam/fazio

Usage

$ fazio -p '[email protected] || 0.8.0 || 1.0.0' -d ~

You may pass as many packages to search for, and as many directories to look through as you want using -p & -d flags:

$ fazio -p 'chokidar@2' -p 'fsevents@<2' -d ~/projects -d ~/work

By default Fazio also checks the globally installed deps. If you want to skip it, pass --no-global-check flag.

You can use the package via npx without installing the Fazio globally:

$ npx @funboxteam/fazio --package '[email protected] || 0.8.0 || 1.0.0' --directory ~ --verbose
npx: installed 5 in 0.908s
Directories to scan:
  /home/ai
  /home/ai/.nvm/versions/node/v14.18.0/lib

× /home/ai/freelance/important-project/node_modules/[email protected]
× /home/ai/work/homepage/node_modules/[email protected]
→ /home/ai/projects/sandbox/node_modules/[email protected]
× /home/ai/projects/igoradamenko.com/node_modules/[email protected]

1 package found.
3 packages omitted.

Sponsored by FunBox

About

A tool to find an npm dep somewhere on your filesystem

Resources

License

Stars

Watchers

Forks