Skip to main content

NPM Audit Interpreter and Check MK output generator

This program takes the output of a npm audit --json run and interprets it. The parameters given define the thresholds to be used, and the output is written to the given directory for check mk local checks.

Requirements:

  • An npm installation with the npm audit command available.
> npm_audit_checkmk -f tests/example.json -s 'frontend_vulnerabilities'
<<<local>>>
P frontend_vulnerabilities INFO=0|LOW=7;20|MODERATE=2;10;20|HIGH=55;1;3|CRITICAL=2;0;0 See `npm audit` for more details.

Usage

pushd /path/to/your/project
npm audit --json | npmauditcheckmk -o /var/lib/check_mk_agent/spool/90000_npm_audit.txt
popd

Metadata

Release files for npm-audit-checkmk 0.1.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for npm-audit-checkmk 0.1.0
File Size Uploaded Provenance
npm-audit-checkmk-0.1.0.tar.gz 15.7 kB Without provenance Details

Built distribution (wheel)

Table of built distributions (wheels) for npm-audit-checkmk 0.1.0
File Interpreter ABI Platform
npm_audit_checkmk-0.1.0-py2.py3-none-any.whl Python 2, Python 3 none any Details

Total release size: 32.6 kB

Release files / npm-audit-checkmk-0.1.0.tar.gz

Download URL npm-audit-checkmk-0.1.0.tar.gz
Size 15.7 kB
Tags Source
SHA-256 checksum
How to use checksums
41084c17b8f8909aa80c426bc27fb6f4d2a8b1dab67b8cbd725eaabaad79b161
BLAKE2b-256 checksum
How to use checksums
3db3d50061715e7c6df646d603f62803a152cb594c3f9a980fcdac98f7f13e47
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/1.13.0 pkginfo/1.5.0.1 requests/2.20.1 setuptools/40.5.0 requests-toolbelt/0.8.0 tqdm/4.31.1 CPython/3.6.5

Release files / npm_audit_checkmk-0.1.0-py2.py3-none-any.whl

Download URL npm_audit_checkmk-0.1.0-py2.py3-none-any.whl
Size 16.8 kB
Tags Python 2 Python 3
SHA-256 checksum
How to use checksums
0d0322b59ce94a252d76d99002497d8b6ed4a0e90abcef4003d654f4d4224a92
BLAKE2b-256 checksum
How to use checksums
4d0c63887f43aae80aace9fa7ba4b6001a481f2ca61be086f5401b805af02293
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/1.13.0 pkginfo/1.5.0.1 requests/2.20.1 setuptools/40.5.0 requests-toolbelt/0.8.0 tqdm/4.31.1 CPython/3.6.5

Security for npm-audit-checkmk 0.1.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

Release history Release notifications | RSS feed

This release

0.1.0 This release

2 release files No provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page