NPM Audit Interpreter and Check MK output generator
This program takes the output of a npm audit --json run and interprets it.
The parameters given define the thresholds to be used, and the output is written to the given directory for check mk local checks.
Requirements:
- An npm installation with the
npm auditcommand available.
> npm_audit_checkmk -f tests/example.json -s 'frontend_vulnerabilities'
<<<local>>>
P frontend_vulnerabilities INFO=0|LOW=7;20|MODERATE=2;10;20|HIGH=55;1;3|CRITICAL=2;0;0 See `npm audit` for more details.
Usage
pushd /path/to/your/project
npm audit --json | npmauditcheckmk -o /var/lib/check_mk_agent/spool/90000_npm_audit.txt
popd
Metadata
Release files for npm-audit-checkmk 0.1.0
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| npm-audit-checkmk-0.1.0.tar.gz | 15.7 kB | Without provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| npm_audit_checkmk-0.1.0-py2.py3-none-any.whl | Python 2, Python 3 | none | any | Details |
Total release size: 32.6 kB
Release files / npm-audit-checkmk-0.1.0.tar.gz
| Download URL | npm-audit-checkmk-0.1.0.tar.gz |
|---|---|
| Size | 15.7 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
41084c17b8f8909aa80c426bc27fb6f4d2a8b1dab67b8cbd725eaabaad79b161
|
|
BLAKE2b-256 checksum How to use checksums |
3db3d50061715e7c6df646d603f62803a152cb594c3f9a980fcdac98f7f13e47
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/1.13.0 pkginfo/1.5.0.1 requests/2.20.1 setuptools/40.5.0 requests-toolbelt/0.8.0 tqdm/4.31.1 CPython/3.6.5
|
Release files / npm_audit_checkmk-0.1.0-py2.py3-none-any.whl
| Download URL | npm_audit_checkmk-0.1.0-py2.py3-none-any.whl |
|---|---|
| Size | 16.8 kB |
| Tags | Python 2 Python 3 |
|
SHA-256 checksum How to use checksums |
0d0322b59ce94a252d76d99002497d8b6ed4a0e90abcef4003d654f4d4224a92
|
|
BLAKE2b-256 checksum How to use checksums |
4d0c63887f43aae80aace9fa7ba4b6001a481f2ca61be086f5401b805af02293
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/1.13.0 pkginfo/1.5.0.1 requests/2.20.1 setuptools/40.5.0 requests-toolbelt/0.8.0 tqdm/4.31.1 CPython/3.6.5
|
Security for npm-audit-checkmk 0.1.0
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.