Posts tagged: npm

Sun 05 September 2021 in MediaWiki

tagged ci, mastodon-archive, microblog, npm

package-lock-lint 0.2.0

Just released 0.2.0 of package-lock-lint: https://lib.rs/crates/package-lock-lint with lockfileVersion 2 (#npm 7) support!It performs basic checks on package-lock.json because they're impossible to review.And I formally proposed enabling it in #Wikimedia CI: https://lists.wikimedia.org/hyperkitty/list/wikitech-l@lists.wikimedia.org/thread/Q63LIVSJQAGFDBEFSXN24EMHGQYNTQJR/

Sun 05 April 2020 in MediaWiki

tagged libup, mediawiki, npm, security

Fixing npm security issues immediately in MediaWiki projects

For the past 5ish years, I've been working on a project called libraryupgrader (LibUp for short) to semi-automatically upgrade dependency libraries in the 900+ MediaWiki extension and related git repositories. For those that use GitHub, it's similar to the new dependabot tool, except LibUp is free software. One cool feature…