Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 17, 2024 via pnpm

normalize-package-data 1.0.0

Normalizes data that can be found in package.json files.
Package summary
Share
5
issues
1
critical severity
license
1
2
high severity
vulnerability
1
license
1
1
moderate severity
vulnerability
1
1
low severity
license
1
4
licenses
1
MIT
1
BSD-2-Clause
1
N/A
1
BSD
Package created
9 Apr 2013
Version published
31 Jul 2014
Maintainers
5
Total deps
4
Direct deps
3
License
UNKNOWN

Issues

5

1 critical severity issue

critical
Recommendation: Check the package code and files for license information
via: normalize-package-data@1.0.0
Collapse
Expand

2 high severity issues

high
Recommendation: Upgrade to version 4.3.2 or later
via: semver@3.0.1
Recommendation: Validate that the package complies with your license policy
via: semver@3.0.1
Collapse
Expand

1 moderate severity issue

moderate
Recommendation: Upgrade to version 5.7.2 or later
via: semver@3.0.1
Collapse
Expand

1 low severity issue

low
Recommendation: Read and validate the license terms
via: semver@3.0.1
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
github-url-from-git@1.5.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
github-url-from-username-repo@0.2.0

N/A

N/A
1 Packages, Including:
normalize-package-data@1.0.0

BSD

Invalid
Not OSI Approved
1 Packages, Including:
semver@3.0.1
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

3
All Dependencies CSV
β“˜ This is a list of normalize-package-data 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
github-url-from-git1.5.02.71 kBMIT
prod
github-url-from-username-repo0.2.01.84 kBBSD-2-Clause
prod
semver3.0.132.54 kBBSD
prod
2
1
1

Visualizations

Frequently Asked Questions

What does normalize-package-data do?

The npm package "normalize-package-data" exports a function that primarily helps to normalize package metadata found typically in a package.json file. It contains algorithms that make necessary refinements and adjustments to provide cleaner, more consistent data from the package.json file. This makes it a critical utility for JavaScript development, especially when working with npm registry or any similar registries. The tool is typically used by packages like read-package-json, which in turn is utilized by npm and various other npm-associated tools. This package ensures that data received from a package.json file is accurate, valid, and structured according to predefined rules.

How do you use normalize-package-data?

To use normalize-package-data, first, the package should be installed via npm using:

npm install normalize-package-data

After installation, it can be included and utilized inside your JavaScript file. Here's a basic example:

let normalizeData = require('normalize-package-data');
let packageData = require("./package.json");
normalizeData(packageData);
// packageData is now normalized

In this example, we require the function exported by normalize-package-data and call it 'normalizeData'. Next, data to normalize - generally from a package.json file - is required and passed as an argument to our 'normalizeData' function.

The package also has a strict mode for validation and a warning function for logging imperfect input data:

let normalizeData = require('normalize-package-data');
let packageData = require("./package.json");
let warnFn = function(msg) { console.error(msg) }
normalizeData(packageData, true, warnFn);
// packageData is now normalized. Strict mode, Any number of warnings may have been logged.

Validations and warnings are triggered depending on the rules outlined for the various fields in the package data.

Where are the normalize-package-data docs?

Documentation for the normalize-package-data package does not exist in a formal format aside from the README file on the package's GitHub repository. The README serves as the primary source of introduction, installation guide, usage instructions, and lists the rules it follows to normalize data. To understand how to use this package and its specifics, you may access the README file at normalize-package-data GitHub repository. Detailed instructions and expected behaviors for different fields are outlined in the text.