|
| 1 | +# npcheck review - July 21 2023 |
| 2 | + |
| 3 | +No major concerns were noted in this review. |
| 4 | + |
| 5 | +## Diff in npcheck.json since last review |
| 6 | + |
| 7 | +```shell |
| 8 | +diff --git a/npcheck.json b/npcheck.json |
| 9 | +index 517047f..4a9bb4b 100644 |
| 10 | +--- a/npcheck.json |
| 11 | ++++ b/npcheck.json |
| 12 | +@@ -428,6 +428,16 @@ |
| 13 | + "section": [ |
| 14 | + "Consuming Services" |
| 15 | + ] |
| 16 | ++ }, |
| 17 | ++ { |
| 18 | ++ "name": "cors", |
| 19 | ++ "npmlink": "https://www.npmjs.com/package/cors", |
| 20 | ++ "reviewlevel": "Yearly Watch", |
| 21 | ++ "activitycurrent": "None", |
| 22 | ++ "activitytarget": "None", |
| 23 | ++ "section": [ |
| 24 | ++ "CORS" |
| 25 | ++ ] |
| 26 | + } |
| 27 | + ], |
| 28 | + "licenses": { |
| 29 | +@@ -517,6 +527,14 @@ |
| 30 | + "note": "dependency spdx-exceptions uses CC-BY-3.0 allows broad use with attribution", |
| 31 | + "note": "dependency [email protected] uses Python-2.0", |
| 32 | + "allow": ["Artistic-2.0", "CC0-1.0", "CC-BY-3.0", "Python-2.0" ] |
| 33 | ++ }, |
| 34 | ++ "@opentelemetry/sdk-trace-base": { |
| 35 | ++ "note": "dependency [email protected] uses which is less restrictive than BSD", |
| 36 | ++ "allow": ["0BSD" ] |
| 37 | ++ }, |
| 38 | ++ "@opentelemetry/sdk-trace-node": { |
| 39 | ++ "note": "dependency [email protected] uses which is less restrictive than BSD", |
| 40 | ++ "allow": ["0BSD" ] |
| 41 | + } |
| 42 | + } |
| 43 | + }, |
| 44 | +``` |
| 45 | + |
| 46 | +## Results |
| 47 | + |
| 48 | +```shell |
| 49 | +https://github.com/nodeshift/nodejs-reference-architecture/actions/runs/5625511727/job/15244434732 |
| 50 | + |
| 51 | +NPCheck Report |
| 52 | +(1): The "cldr-localenames-full" seems that is lacking appropriate testing (https://www.github.com/unicode-cldr/cldr-json) |
| 53 | +(2): The module "cldr-localenames-full" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 54 | +(3): The module "cldr-localenames-full" seems to have no available TypeScript typings. |
| 55 | +(4): The module "eslint" seems to have no available TypeScript typings. |
| 56 | +(5): The module "eslint" has "95" dependencies (including sub-dependencies) which is more than the default "20". |
| 57 | +(6): The latest release of "express" was 10 months ago |
| 58 | +(7): The module "express" seems to have no available TypeScript typings. |
| 59 | +(8): The module "express" has "56" dependencies (including sub-dependencies) which is more than the default "20". |
| 60 | +(9): The latest release of "express-prom-bundle" was 7 months ago |
| 61 | +(10): The module "ibmcloud-appid" has "213" dependencies (including sub-dependencies) which is more than the default "20". |
| 62 | +(11): The module "i18next" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 63 | +(12): The module "i18next" is not tested by community CITGM runs. |
| 64 | +(13): The module "i18next-icu" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 65 | +(14): The module "i18next-http-middleware" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 66 | +(15): The module "i18next-fs-backend" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 67 | +(16): The module "ioredis" is not tested by community CITGM runs. |
| 68 | +(17): The module "node-rdkafka" seems to have no available TypeScript typings. |
| 69 | +(18): The module "opossum" seems to have no available TypeScript typings. |
| 70 | +(19): The latest release of "passport" was about 1 year ago |
| 71 | +(20): The module "passport" seems to have no available TypeScript typings. |
| 72 | +(21): The module "pino" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 73 | +(22): The module "pino" has "22" dependencies (including sub-dependencies) which is more than the default "20". |
| 74 | +(23): The module "rhea" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 75 | +(24): The latest release of "mocha" was 7 months ago |
| 76 | +(25): The module "mocha" seems to have no available TypeScript typings. |
| 77 | +(26): The module "mocha" has "72" dependencies (including sub-dependencies) which is more than the default "20". |
| 78 | +(27): The "jest" seems that is lacking appropriate testing (https://www.github.com/facebook/jest) |
| 79 | +(28): The module "jest" has "260" dependencies (including sub-dependencies) which is more than the default "20". |
| 80 | +(29): The module "@ibm-cloud/cloudant" has "87" dependencies (including sub-dependencies) which is more than the default "20". |
| 81 | +(30): The module "odbc" has "57" dependencies (including sub-dependencies) which is more than the default "20". |
| 82 | +(31): The module "ibm_db" seems to have no available TypeScript typings. |
| 83 | +(32): The module "ibm_db" has "38" dependencies (including sub-dependencies) which is more than the default "20". |
| 84 | +(33): The module "mongodb" is not tested by community CITGM runs. |
| 85 | +(34): The module "pg" seems to have no available TypeScript typings. |
| 86 | +(35): The module "pg" is not tested by community CITGM runs. |
| 87 | +(36): The "@openapitools/openapi-generator-cli" seems that is lacking appropriate testing (https://www.github.com/OpenAPITools/openapi-generator-cli) |
| 88 | +(37): The module "@openapitools/openapi-generator-cli" seems to have no available TypeScript typings. |
| 89 | +(38): The module "@openapitools/openapi-generator-cli" has "106" dependencies (including sub-dependencies) which is more than the default "20". |
| 90 | +(39): The module "openapi-backend" has "32" dependencies (including sub-dependencies) which is more than the default "20". |
| 91 | +(40): The module "@stoplight/prism-cli" is not tested by community CITGM runs. |
| 92 | +(41): The module "@stoplight/prism-cli" has "176" dependencies (including sub-dependencies) which is more than the default "20". |
| 93 | +(42): The module "express-openapi-validator" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 94 | +(43): The module "express-openapi-validator" seems to have no available TypeScript typings. |
| 95 | +(44): The module "express-openapi-validator" has "56" dependencies (including sub-dependencies) which is more than the default "20". |
| 96 | +(45): The module "swagger-editor" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 97 | +(46): The module "swagger-editor" seems to have no available TypeScript typings. |
| 98 | +(47): The module "swagger-editor" has "319" dependencies (including sub-dependencies) which is more than the default "20". |
| 99 | +(48): The latest release of "openapi-editor" was over 2 years ago |
| 100 | +(49): The module "openapi-editor" has "199" dependencies (including sub-dependencies) which is more than the default "20". |
| 101 | +(50): The latest release of "nyc" was about 3 years ago |
| 102 | +(51): The module "nyc" seems to have no available TypeScript typings. |
| 103 | +(52): The module "nyc" is not tested by community CITGM runs. |
| 104 | +(53): The module "nyc" has "145" dependencies (including sub-dependencies) which is more than the default "20". |
| 105 | +(54): The module "dotenv" is not tested by community CITGM runs. |
| 106 | +(55): The module "node-vault" seems to have no available TypeScript typings. |
| 107 | +(56): The module "node-vault" is not tested by community CITGM runs. |
| 108 | +(57): The module "node-vault" has "59" dependencies (including sub-dependencies) which is more than the default "20". |
| 109 | +(58): The module "@ibm-cloud/secrets-manager" seems to have no available TypeScript typings. |
| 110 | +(59): The module "@ibm-cloud/secrets-manager" is not tested by community CITGM runs. |
| 111 | +(60): The module "@ibm-cloud/secrets-manager" has "87" dependencies (including sub-dependencies) which is more than the default "20". |
| 112 | +(61): The module "@opentelemetry/sdk-trace-base" is not tested by community CITGM runs. |
| 113 | +(62): The module "@opentelemetry/sdk-trace-node" is not tested by community CITGM runs. |
| 114 | +(63): The module "axios" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 115 | +(64): The module "axios" is not tested by community CITGM runs. |
| 116 | +(65): The module "node-fetch" is not tested by community CITGM runs. |
| 117 | +(66): The latest release of "cors" was over 4 years ago |
| 118 | +(67): The module "cors" seems to have no available TypeScript typings. |
| 119 | +(68): The module "cors" is not tested by community CITGM runs. |
| 120 | + |
| 121 | +problems: 68 (errors: 0 - warnings: 68) |
| 122 | + |
| 123 | + |
| 124 | +``` |
| 125 | +
|
| 126 | +New (materially) since last review (excluding ones were # deps was already over limit and changed): |
| 127 | +``` |
| 128 | +3): The module "cldr-localenames-full" seems to have no available TypeScript typings. |
| 129 | +(4): The module "eslint" seems to have no available TypeScript typings. |
| 130 | +(7): The module "express" seems to have no available TypeScript typings. |
| 131 | +(9): The latest release of "express-prom-bundle" was 7 months ago |
| 132 | +(18): The module "opossum" seems to have no available TypeScript typings. |
| 133 | +(20): The module "passport" seems to have no available TypeScript typings. |
| 134 | +(22): The module "pino" has "22" dependencies (including sub-dependencies) which is more than the default "20". |
| 135 | +(24): The latest release of "mocha" was 7 months ago |
| 136 | +(25): The module "mocha" seems to have no available TypeScript typings. |
| 137 | +(31): The module "ibm_db" seems to have no available TypeScript typings. |
| 138 | +(34): The module "pg" seems to have no available TypeScript typings. |
| 139 | +(46): The module "swagger-editor" seems to have no available TypeScript typings. |
| 140 | +(51): The module "nyc" seems to have no available TypeScript typings. |
| 141 | +(55): The module "node-vault" seems to have no available TypeScript typings. |
| 142 | +(66): The latest release of "cors" was over 4 years ago |
| 143 | +(67): The module "cors" seems to have no available TypeScript typings. |
| 144 | +(68): The module "cors" is not tested by community CITGM runs. |
| 145 | +``` |
| 146 | +## Notes |
| 147 | +The increased warnings about no avilable TypeScript typings is because the api we used to use |
| 148 | +to find typings was deprecated and we have not managed to find an alternative yet. This |
| 149 | +results in modules that have typings now being reported as not having them. |
| 150 | +
|
| 151 | +
|
0 commit comments