Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on Apr 11, 2024 via pnpm
Package summary
Share
3
issues
1
high severity
license
1
2
low severity
license
2
7
licenses
29
MIT
6
ISC
2
Apache-2.0
5
other licenses
(MIT OR CC0-1.0)
2
BSD-2-Clause
1
CC-BY-3.0
1
CC0-1.0
1
Package created
3 Sep 2015
Version published
22 Aug 2023
Maintainers
1
Total deps
42
Direct deps
3
License
MIT

Issues

3

1 high severity issue

high
Recommendation: Read and validate the license terms
via: read-pkg@8.1.0
Collapse
Expand

2 low severity issues

low
Recommendation: Read and validate the license terms
via: read-pkg@8.1.0
Recommendation: Read and validate the license terms
via: read-pkg@8.1.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
29 Packages, Including:
@babel/code-frame@7.24.2
@babel/helper-validator-identifier@7.22.20
@babel/highlight@7.24.2
@types/normalize-package-data@2.4.4
ansi-styles@3.2.1
chalk@2.4.2
color-convert@1.9.3
color-name@1.1.3
error-ex@1.3.2
escape-string-regexp@1.0.5
find-up@6.3.0
function-bind@1.1.2
has-flag@3.0.0
hasown@2.0.2
is-arrayish@0.2.1
is-core-module@2.13.1
js-tokens@4.0.0
json-parse-even-better-errors@3.0.1
lines-and-columns@2.0.4
locate-path@7.2.0
p-limit@4.0.0
p-locate@6.0.0
parse-json@7.1.1
path-exists@5.0.0
read-pkg-up@10.1.0
read-pkg@8.1.0
spdx-expression-parse@3.0.1
supports-color@5.5.0
yocto-queue@1.0.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
6 Packages, Including:
hosted-git-info@7.0.1
lru-cache@10.2.0
lru-cache@6.0.0
picocolors@1.0.0
semver@7.6.0
yallist@4.0.0

Apache License 2.0

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
use-patent-claims
place-warranty
Cannot
hold-liable
use-trademark
Must
include-copyright
include-license
state-changes
include-notice
2 Packages, Including:
spdx-correct@3.2.0
validate-npm-package-license@3.0.4

(MIT OR CC0-1.0)

Public Domain
2 Packages, Including:
type-fest@3.13.1
type-fest@4.15.0

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
1 Packages, Including:
normalize-package-data@6.0.0

Creative Commons Attribution 3.0 Unported

Uncategorized
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-exceptions@2.5.0

Creative Commons Zero v1.0 Universal

Public Domain
Not OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
Cannot
Must
1 Packages, Including:
spdx-license-ids@3.0.17
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

3
All Dependencies CSV
β“˜ This is a list of read-pkg-up 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
find-up6.3.04.06 kBMIT
prod
read-pkg8.1.02.82 kBMIT
prod
1
2
type-fest4.15.0349.25 kB(MIT OR CC0-1.0)
prod

Visualizations

Frequently Asked Questions

What does read-pkg-up do?

Read-pkg-up is a highly efficient tool designed to help you find and read the closest package.json file. It is highly beneficial as it not only finds the nearest package.json but also throws more helpful JSON errors and normalizes the provided data. The package performs several tasks that includes finding the closest package.json, parsing JSON and normalizing the data.

How do you use read-pkg-up?

To use read-pkg-up in your project, you'll first need to install it via npm by running the command npm install read-pkg-up. Once installed, you can import it into your JavaScript file with import {readPackageUp} from 'read-pkg-up';. Then, simply call the function, for instance, console.log(await readPackageUp()); to read and log to console the closest package.json file.

Here's a basic usage example:

import {readPackageUp} from 'read-pkg-up';

console.log(await readPackageUp()); // Logs the closest package.json file

If the given directory contains a package.json file, then the promise will resolve to an object containing the packageJson and path. If no package.json was found, the promise will resolve to undefined. Furthermore, there are several options you can pass to the function for customized usage.

Where are the read-pkg-up docs?

The read-pkg-up docs can be found on the read-pkg-up GitHub repository, in the README.md file. You can visit the repository at git+https://github.com/sindresorhus/read-pkg-up.git to view the complete documentation, understand the API endpoints better and explore its functionalities more deeply. For a detailed explanation of each code usage example and valuable related links to understand better, make sure to thoroughly follow the documentation.