|
| 1 | +# npcheck review - July 1 2024 |
| 2 | + |
| 3 | + |
| 4 | + |
| 5 | +## Diff in npcheck.json since last review |
| 6 | + |
| 7 | +```shell |
| 8 | +diff --git a/npcheck.json b/npcheck.json |
| 9 | +index 1f65eff..dba4bca 100644 |
| 10 | +--- a/npcheck.json |
| 11 | ++++ b/npcheck.json |
| 12 | +@@ -450,7 +450,8 @@ |
| 13 | + "BSD-3-Clause", |
| 14 | + "Unlicense", |
| 15 | + "WTFPL", |
| 16 | +- "Unicode-DFS-2016" |
| 17 | ++ "Unicode-DFS-2016", |
| 18 | ++ "Unicode-3.0" |
| 19 | + ], |
| 20 | + "rules": { |
| 21 | + "ioredis": { |
| 22 | +``` |
| 23 | +
|
| 24 | +## Results |
| 25 | +
|
| 26 | +https://github.com/nodeshift/nodejs-reference-architecture/actions/runs/9746832658 |
| 27 | +
|
| 28 | +
|
| 29 | +NPCheck Report |
| 30 | +
|
| 31 | +```shell |
| 32 | +(1): The module "node-rdkafka" seems to have no available TypeScript typings. |
| 33 | +(2): The module "cldr-localenames-full" is under the non-acceptable license(s) "Unicode-3.0". - ERROR |
| 34 | +(3): The module "cldr-localenames-full" depends on the "[email protected]" package which is under the non-acceptable license "Unicode-3.0". - ERROR |
| 35 | +(4): The "cldr-localenames-full" seems that is lacking appropriate testing (https://www.github.com/unicode-cldr/cldr-json) |
| 36 | +(5): The module "cldr-localenames-full" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 37 | +(6): The module "cldr-localenames-full" seems to have no available TypeScript typings. |
| 38 | +(7): The module "eslint" seems to have no available TypeScript typings. |
| 39 | +(8): The module "eslint" has "87" dependencies (including sub-dependencies) which is more than the default "20". |
| 40 | +(9): The module "express" seems to have no available TypeScript typings. |
| 41 | +(10): The module "express" has "62" dependencies (including sub-dependencies) which is more than the default "20". |
| 42 | +(11): The module "express-prom-bundle" has "80" dependencies (including sub-dependencies) which is more than the default "20". |
| 43 | +(12): The latest release of "helmet" was 8 months ago |
| 44 | +(13): The latest release of "ibmcloud-appid" was over 1 year ago |
| 45 | +(14): The module "ibmcloud-appid" has "227" dependencies (including sub-dependencies) which is more than the default "20". |
| 46 | +(15): The module "i18next" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 47 | +(16): The module "i18next" is not tested by community CITGM runs. |
| 48 | +(17): The latest release of "i18next-icu" was about 1 year ago |
| 49 | +(18): The module "i18next-icu" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 50 | +(19): The module "i18next-http-middleware" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 51 | +(20): The latest release of "i18next-fs-backend" was 7 months ago |
| 52 | +(21): The module "i18next-fs-backend" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 53 | +(22): The module "ioredis" is not tested by community CITGM runs. |
| 54 | +(23): The module "opossum" seems to have no available TypeScript typings. |
| 55 | +(24): The latest release of "passport" was 7 months ago |
| 56 | +(25): The module "passport" seems to have no available TypeScript typings. |
| 57 | +(26): The module "pino" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 58 | +(27): The module "pino" has "22" dependencies (including sub-dependencies) which is more than the default "20". |
| 59 | +(28): The latest release of "rhea" was over 1 year ago |
| 60 | +(29): The module "rhea" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 61 | +(30): The module "mocha" seems to have no available TypeScript typings. |
| 62 | +(31): The module "mocha" has "69" dependencies (including sub-dependencies) which is more than the default "20". |
| 63 | +(32): The "jest" seems that is lacking appropriate testing (https://www.github.com/jestjs/jest) |
| 64 | +(33): The module "jest" has "261" dependencies (including sub-dependencies) which is more than the default "20". |
| 65 | +(34): The module "@ibm-cloud/cloudant" has "91" dependencies (including sub-dependencies) which is more than the default "20". |
| 66 | +(35): The latest release of "nano" was 8 months ago |
| 67 | +(36): The module "nano" has "25" dependencies (including sub-dependencies) which is more than the default "20". |
| 68 | +(37): The latest release of "odbc" was about 1 year ago |
| 69 | +(38): The module "odbc" has "56" dependencies (including sub-dependencies) which is more than the default "20". |
| 70 | +(39): The module "ibm_db" seems to have no available TypeScript typings. |
| 71 | +(40): The module "ibm_db" has "45" dependencies (including sub-dependencies) which is more than the default "20". |
| 72 | +(41): The module "mongodb" is not tested by community CITGM runs. |
| 73 | +(42): The module "pg" seems to have no available TypeScript typings. |
| 74 | +(43): The module "pg" is not tested by community CITGM runs. |
| 75 | +(44): The latest release of "kafkajs" was over 1 year ago |
| 76 | +(45): The "@openapitools/openapi-generator-cli" seems that is lacking appropriate testing (https://www.github.com/OpenAPITools/openapi-generator-cli) |
| 77 | +(46): The module "@openapitools/openapi-generator-cli" seems to have no available TypeScript typings. |
| 78 | +(47): The module "@openapitools/openapi-generator-cli" has "111" dependencies (including sub-dependencies) which is more than the default "20". |
| 79 | +(48): The module "openapi-backend" has "35" dependencies (including sub-dependencies) which is more than the default "20". |
| 80 | +(49): The module "@stoplight/prism-cli" is not tested by community CITGM runs. |
| 81 | +(50): The module "@stoplight/prism-cli" has "176" dependencies (including sub-dependencies) which is more than the default "20". |
| 82 | +(51): The module "express-openapi-validator" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 83 | +(52): The module "express-openapi-validator" has "109" dependencies (including sub-dependencies) which is more than the default "20". |
| 84 | +(53): The module "swagger-editor" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 85 | +(54): The module "swagger-editor" seems to have no available TypeScript typings. |
| 86 | +(55): The module "swagger-editor" has "374" dependencies (including sub-dependencies) which is more than the default "20". |
| 87 | +(56): The latest release of "openapi-editor" was over 3 years ago |
| 88 | +(57): The module "openapi-editor" has "200" dependencies (including sub-dependencies) which is more than the default "20". |
| 89 | +(58): The module "nyc" seems to have no available TypeScript typings. |
| 90 | +(59): The module "nyc" is not tested by community CITGM runs. |
| 91 | +(60): The module "nyc" has "145" dependencies (including sub-dependencies) which is more than the default "20". |
| 92 | +(61): The module "dotenv" is not tested by community CITGM runs. |
| 93 | +(62): The latest release of "node-vault" was 12 months ago |
| 94 | +(63): The module "node-vault" seems to have no available TypeScript typings. |
| 95 | +(64): The module "node-vault" is not tested by community CITGM runs. |
| 96 | +(65): The module "node-vault" has "59" dependencies (including sub-dependencies) which is more than the default "20". |
| 97 | +(66): The module "@ibm-cloud/secrets-manager" seems to have no available TypeScript typings. |
| 98 | +(67): The module "@ibm-cloud/secrets-manager" is not tested by community CITGM runs. |
| 99 | +(68): The module "@ibm-cloud/secrets-manager" has "90" dependencies (including sub-dependencies) which is more than the default "20". |
| 100 | +(69): The module "@opentelemetry/sdk-trace-base" is not tested by community CITGM runs. |
| 101 | +(70): The module "@opentelemetry/sdk-trace-node" is not tested by community CITGM runs. |
| 102 | +(71): The module "axios" does not specify the engines field or package-support.json, so we cannot determine if it supports the LTS versions of Node.js. |
| 103 | +(72): The module "axios" is not tested by community CITGM runs. |
| 104 | +(73): The latest release of "node-fetch" was 10 months ago |
| 105 | +(74): The module "node-fetch" is not tested by community CITGM runs. |
| 106 | +(75): The latest release of "cors" was over 5 years ago |
| 107 | +(76): The module "cors" seems to have no available TypeScript typings. |
| 108 | +(77): The module "cors" is not tested by community CITGM runs. |
| 109 | + |
| 110 | +problems: 77 (errors: 2 - warnings: 75) |
| 111 | +``` |
| 112 | +
|
| 113 | +
|
| 114 | +New (materially) since last review (excluding ones were # deps was already over limit and changed): |
| 115 | +``` |
| 116 | +None |
| 117 | +``` |
| 118 | +## Notes |
| 119 | +
|
| 120 | +There was a release of NYC since the last report. It had been 4 years since the last one |
| 121 | +
|
| 122 | +(2): The module "cldr-localenames-full" is under the non-acceptable license(s) "Unicode-3.0". - ERROR |
| 123 | +(3): The module "cldr-localenames-full" depends on the "[email protected]" package which is under the non-acceptable license "Unicode-3.0". - ERROR |
| 124 | +
|
| 125 | +The `cldr-localenames-full` and `cldr-core` have changed their licenses from `Unicode-DFS-2016` to `Unicode-3.0` which is failing the checks. I think we can just add the `Unicode-3.0` option to the list of valid licenses. |
| 126 | +
|
| 127 | +A few modules are `aging` in terms of the last release. Not necessariliy something to worry about yet but worth keeping an eye on |
| 128 | +
|
| 129 | +Aging |
| 130 | +(12): The latest release of "helmet" was 8 months ago |
| 131 | +(20): The latest release of "i18next-fs-backend" was 7 months ago |
| 132 | +(24): The latest release of "passport" was 7 months ago |
| 133 | +(35): The latest release of "nano" was 8 months ago |
0 commit comments