Home
Docs
GitHub
Pricing
Blog
Log In

Run Sandworm Audit for your App

Get started
Hold on, we're currently generating a fresh version of this report
Generated on May 10, 2024 via pnpm

update-notifier 7.0.0

Update notifications for your CLI app
Package summary
Share
1
issue
1
high severity
license
1
5
licenses
66
MIT
9
ISC
3
BSD-2-Clause
3
other licenses
(MIT OR CC0-1.0)
2
(BSD-2-Clause OR MIT OR Apache-2.0)
1
Package created
8 Dec 2012
Version published
27 Oct 2023
Maintainers
9
Total deps
81
Direct deps
12
License
BSD-2-Clause

Issues

1

1 high severity issue

high
Recommendation: Validate that the license expression complies with your license policy
via: latest-version@7.0.0
Collapse
Expand

Licenses

MIT License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
sublicense
private-use
Cannot
hold-liable
Must
include-copyright
include-license
66 Packages, Including:
@pnpm/config.env-replace@1.1.0
@pnpm/network.ca-file@1.0.2
@pnpm/npm-conf@2.2.2
@sindresorhus/is@5.6.0
@szmarczak/http-timer@5.0.1
@types/http-cache-semantics@4.0.4
ansi-regex@5.0.1
ansi-regex@6.0.1
ansi-styles@6.2.1
boxen@7.1.1
cacheable-lookup@7.0.0
cacheable-request@10.2.14
camelcase@7.0.1
chalk@5.3.0
cli-boxes@3.0.0
config-chain@1.1.13
crypto-random-string@4.0.0
decompress-response@6.0.0
deep-extend@0.6.0
defer-to-connect@2.0.1
dot-prop@6.0.1
eastasianwidth@0.2.0
emoji-regex@8.0.0
emoji-regex@9.2.2
escape-goat@4.0.0
form-data-encoder@2.1.4
get-stream@6.0.1
global-dirs@3.0.1
got@12.6.1
http2-wrapper@2.2.1
import-lazy@4.0.0
imurmurhash@0.1.4
is-fullwidth-code-point@3.0.0
is-in-ci@0.1.0
is-installed-globally@0.4.0
is-npm@6.0.0
is-obj@2.0.0
is-path-inside@3.0.3
is-typedarray@1.0.0
json-buffer@3.0.1
keyv@4.5.4
latest-version@7.0.0
lowercase-keys@3.0.0
mimic-response@3.1.0
mimic-response@4.0.0
minimist@1.2.8
normalize-url@8.0.1
p-cancelable@3.0.0
package-json@8.1.1
pupa@3.1.0

ISC License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
Cannot
hold-liable
Must
include-copyright
include-license
9 Packages, Including:
ansi-align@3.0.1
graceful-fs@4.2.10
graceful-fs@4.2.11
ini@1.3.8
ini@2.0.0
proto-list@1.2.4
semver@7.6.2
signal-exit@3.0.7
write-file-atomic@3.0.3

BSD 2-Clause "Simplified" License

Permissive
OSI Approved
This is a human-readable summary of (and not a substitute for) the license. Disclaimer.
Can
commercial-use
modify
distribute
place-warranty
Cannot
hold-liable
Must
include-copyright
include-license
3 Packages, Including:
configstore@6.0.0
http-cache-semantics@4.1.1
update-notifier@7.0.0

(MIT OR CC0-1.0)

Public Domain
2 Packages, Including:
type-fest@1.4.0
type-fest@2.19.0

(BSD-2-Clause OR MIT OR Apache-2.0)

Expression
1 Packages, Including:
rc@1.2.8
Disclaimer

This deed highlights only some of the key features and terms of the actual license. It is not a license and has no legal value. You should carefully review all of the terms and conditions of the actual license before using the licensed material.

Sandworm is not a law firm and does not provide legal services. Distributing, displaying, or linking to this deed or the license that it summarizes does not create a lawyer-client or any other relationship.

Direct Dependencies

12
All Dependencies CSV
β“˜ This is a list of update-notifier 's direct dependencies. Data on all dependencies, including transitive ones, is available via CSV download.
NameVersionSizeLicenseTypeVulnerabilities
boxen7.1.16.76 kBMIT
prod
chalk5.3.013.08 kBMIT
prod
configstore6.0.03.33 kBBSD-2-Clause
prod
import-lazy4.0.02.17 kBMIT
prod
is-in-ci0.1.02.07 kBMIT
prod
is-installed-globally0.4.01.71 kBMIT
prod
is-npm6.0.01.99 kBMIT
prod
latest-version7.0.02.01 kBMIT
prod
1
pupa3.1.02.86 kBMIT
prod
semver-diff4.0.02.09 kBMIT
prod
semver7.6.293.19 kBISC
prod
xdg-basedir5.1.02.56 kBMIT
prod

Visualizations

Frequently Asked Questions

What does update-notifier do?

The npm package "update-notifier" informs users of your CLI (Command Line Interface) application about the availability of new updates in a non-intrusive manner. It periodically checks with npm for updates in the background and, when available, it persistently displays the update notification. This enables the package consumers to always have the latest version, thereby promoting a similar experience as in browser-based applications.

How do you use update-notifier?

For a simple usage of update-notifier, install the npm package and then import it in your JavaScript file along with your package.json file. After importing, invoke the updateNotifier method with package.json as the argument. Lastly, call the notify method to enable update notifications. Here's a simple usage in code form:

import updateNotifier from 'update-notifier';
import packageJson from './package.json' assert {type: 'json'};

updateNotifier({pkg: packageJson}).notify();

For a more comprehensive usage, you may use the additional features provided by update-notifier. For example, the updateNotifier method returns an instance that can get the information about available updates. This information can be accessed via the update property of the instance.

Additionally, with update-notifier, you can customize the update checking interval and create custom notification messages.

import updateNotifier from 'update-notifier';
import packageJson from './package.json' assert {type: 'json'};

const notifier = updateNotifier({pkg: packageJson, updateCheckInterval: 1000 * 60 * 60 * 24 * 7});

if (notifier.update) {
	console.log(`Update available: ${notifier.update.latest}`);
}

Where are the update-notifier docs?

The official documentation for the update-notifier npm package is included in its README file on its GitHub repository. The README not only provides a thorough guide on the installation, usage, and features of the package but also talks about the philosophy behind its creation. The URL for the repository and hence the documentation is here.