|
| 1 | +# npcheck review - Jan 9 2023 |
| 2 | + |
| 3 | +No major concerns were noted in this review. |
| 4 | + |
| 5 | +## Diff in npcheck.json since last review |
| 6 | + |
| 7 | +None |
| 8 | + |
| 9 | +## Results |
| 10 | + |
| 11 | +run locally due to automation issues |
| 12 | + |
| 13 | +npcheck report |
| 14 | + |
| 15 | +```shell |
| 16 | +1): The "cldr-localenames-full" seems that is lacking appropriate testing (https://www.github.com/unicode-cldr/cldr-json) |
| 17 | +(2): The module "cldr-localenames-full" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 18 | +(3): The module "cldr-localenames-full" seems to have no available TypeScript typings. |
| 19 | +(4): The module "eslint" seems to have no available TypeScript typings. |
| 20 | +(5): The module "eslint" has "98" dependencies (including sub-dependencies) which is more than the default "20". |
| 21 | +(6): The latest release of "express" was over 1 year ago |
| 22 | +(7): The module "express" seems to have no available TypeScript typings. |
| 23 | +(8): The module "express" is not tested by community CITGM runs. |
| 24 | +(9): The module "express" has "60" dependencies (including sub-dependencies) which is more than the default "20". |
| 25 | +(10): The module "express-prom-bundle" has "78" dependencies (including sub-dependencies) which is more than the default "20". |
| 26 | +(11): The latest release of "ibmcloud-appid" was 11 months ago |
| 27 | +(12): The module "ibmcloud-appid" has "224" dependencies (including sub-dependencies) which is more than the default "20". |
| 28 | +(13): The module "i18next" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 29 | +(14): The module "i18next" is not tested by community CITGM runs. |
| 30 | +(15): The latest release of "i18next-icu" was 9 months ago |
| 31 | +(16): The module "i18next-icu" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 32 | +(17): The module "i18next-http-middleware" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 33 | +(18): The module "i18next-fs-backend" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 34 | +(19): The latest release of "ioredis" was 9 months ago |
| 35 | +(20): The module "ioredis" is not tested by community CITGM runs. |
| 36 | +(21): The module "node-rdkafka" seems to have no available TypeScript typings. |
| 37 | +(22): The module "opossum" seems to have no available TypeScript typings. |
| 38 | +(23): The module "passport" seems to have no available TypeScript typings. |
| 39 | +(24): The module "pino" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 40 | +(25): The module "pino" has "22" dependencies (including sub-dependencies) which is more than the default "20". |
| 41 | +(26): The latest release of "rhea" was 12 months ago |
| 42 | +(27): The module "rhea" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 43 | +(28): The latest release of "mocha" was about 1 year ago |
| 44 | +(29): The module "mocha" seems to have no available TypeScript typings. |
| 45 | +(30): The module "mocha" has "72" dependencies (including sub-dependencies) which is more than the default "20". |
| 46 | +(31): The "jest" seems that is lacking appropriate testing (https://www.github.com/jestjs/jest) |
| 47 | +(32): The module "jest" has "261" dependencies (including sub-dependencies) which is more than the default "20". |
| 48 | +(33): The module "@ibm-cloud/cloudant" has "96" dependencies (including sub-dependencies) which is more than the default "20". |
| 49 | +(34): The module "nano" has "23" dependencies (including sub-dependencies) which is more than the default "20". |
| 50 | +(35): The latest release of "odbc" was 8 months ago |
| 51 | +(36): The module "odbc" has "57" dependencies (including sub-dependencies) which is more than the default "20". |
| 52 | +(37): The module "ibm_db" seems to have no available TypeScript typings. |
| 53 | +(38): The module "ibm_db" has "45" dependencies (including sub-dependencies) which is more than the default "20". |
| 54 | +(39): The module "mongodb" is not tested by community CITGM runs. |
| 55 | +(40): The module "pg" seems to have no available TypeScript typings. |
| 56 | +(41): The module "pg" is not tested by community CITGM runs. |
| 57 | +(42): The latest release of "kafkajs" was 11 months ago |
| 58 | +(43): The "@openapitools/openapi-generator-cli" seems that is lacking appropriate testing (https://www.github.com/OpenAPITools/openapi-generator-cli) |
| 59 | +(44): The module "@openapitools/openapi-generator-cli" seems to have no available TypeScript typings. |
| 60 | +(45): The module "@openapitools/openapi-generator-cli" has "106" dependencies (including sub-dependencies) which is more than the default "20". |
| 61 | +(46): The module "openapi-backend" has "36" dependencies (including sub-dependencies) which is more than the default "20". |
| 62 | +(47): The module "@stoplight/prism-cli" is not tested by community CITGM runs. |
| 63 | +(48): The module "@stoplight/prism-cli" has "179" dependencies (including sub-dependencies) which is more than the default "20". |
| 64 | +(49): The module "express-openapi-validator" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 65 | +(50): The module "express-openapi-validator" has "57" dependencies (including sub-dependencies) which is more than the default "20". |
| 66 | +(51): The module "swagger-editor" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 67 | +(52): The module "swagger-editor" seems to have no available TypeScript typings. |
| 68 | +(53): The module "swagger-editor" has "330" dependencies (including sub-dependencies) which is more than the default "20". |
| 69 | +(54): The latest release of "openapi-editor" was about 3 years ago |
| 70 | +(55): The module "openapi-editor" has "200" dependencies (including sub-dependencies) which is more than the default "20". |
| 71 | +(56): The latest release of "nyc" was over 3 years ago |
| 72 | +(57): The module "nyc" seems to have no available TypeScript typings. |
| 73 | +(58): The module "nyc" is not tested by community CITGM runs. |
| 74 | +(59): The module "nyc" has "145" dependencies (including sub-dependencies) which is more than the default "20". |
| 75 | +(60): The latest release of "dotenv" was 7 months ago |
| 76 | +(61): The module "dotenv" is not tested by community CITGM runs. |
| 77 | +(62): The module "node-vault" seems to have no available TypeScript typings. |
| 78 | +(63): The module "node-vault" is not tested by community CITGM runs. |
| 79 | +(64): The module "node-vault" has "59" dependencies (including sub-dependencies) which is more than the default "20". |
| 80 | +(65): The module "@ibm-cloud/secrets-manager" seems to have no available TypeScript typings. |
| 81 | +(66): The module "@ibm-cloud/secrets-manager" is not tested by community CITGM runs. |
| 82 | +(67): The module "@ibm-cloud/secrets-manager" has "95" dependencies (including sub-dependencies) which is more than the default "20". |
| 83 | +(68): The module "@opentelemetry/sdk-trace-base" is not tested by community CITGM runs. |
| 84 | +(69): The module "@opentelemetry/sdk-trace-node" is not tested by community CITGM runs. |
| 85 | +(70): The module "axios" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 86 | +(71): The module "axios" is not tested by community CITGM runs. |
| 87 | +(72): The module "node-fetch" is not tested by community CITGM runs. |
| 88 | +(73): The latest release of "cors" was about 5 years ago |
| 89 | +(74): The module "cors" seems to have no available TypeScript typings. |
| 90 | +(75): The module "cors" is not tested by community CITGM runs. |
| 91 | +``` |
| 92 | +
|
| 93 | +New (materially) since last review (excluding ones were # deps was already over limit and changed): |
| 94 | +``` |
| 95 | +(10): The module "express-prom-bundle" has "78" dependencies (including sub-dependencies) which is more than the default "20". |
| 96 | +(19): The latest release of "ioredis" was 9 months ago |
| 97 | +(35): The latest release of "odbc" was 8 months ago |
| 98 | +(60): The latest release of "dotenv" was 7 months ago |
| 99 | +``` |
| 100 | +## Notes |
| 101 | +- the increase in deps in express-prom-bundle is noted but not a reason to drop from ref arch |
| 102 | +- the increased times since a release of ioredis, odbc and dotenv is noted, will continue to see if time since last release |
| 103 | + continues to strech out. |
| 104 | +
|
0 commit comments