Show HN: NPM-Audit-to-Report
github.com
Show HN: NPM-Audit-to-Report
1–6 of 6 posts
Re: Show HN: NPM-Audit-to-Report
#2The README is kinda light on details. This is a utility written in Go that convert yarn’s audit file from json to Markdown for reporting as part of the CI pipeline.
I’m wondering if yarn’s audit is better than npm’s audit?
Re: Show HN: NPM-Audit-to-Report
#3The README is kinda light on details. This is a utility written in Go that convert yarn’s audit file from json to Markdown for reporting as part of the CI pipeline. I’m wondering if yarn’s audit is better than npm’s audit?
Actually, it's the same. As I understand they use one database.
Re: Show HN: NPM-Audit-to-Report
#4Why not use
npm audit --json
Re: Show HN: NPM-Audit-to-Report
#5Why not use npm audit --json and just pass it to a template?
The script seems to be invoking yarn audit --json and does the templating.
Re: Show HN: NPM-Audit-to-Report
#6Why not use npm audit --json and just pass it to a template?
Not easy it sounds. Generated file has JSONL and each has summary or advisory lines. My script just processes them to a Markdown in Go.