Skip to content

[package shallow] Add replacement for info command#369

Merged
jdalton merged 4 commits intomainfrom
pkg_score
Mar 18, 2025
Merged

[package shallow] Add replacement for info command#369
jdalton merged 4 commits intomainfrom
pkg_score

Conversation

@pvdz
Copy link
Contributor

@pvdz pvdz commented Mar 18, 2025

This adds a new command: socket package shallow, which is in the same vain as the socket info command except it doesn't reflect the dependencies or its transitives.

  • It uses the /purl endpoint, rather than the /npm endpoint
  • It supports looking up multiple packages at once
  • It supports a list of purls and npm babel tenko sort of args and even a mix
  • Supports --json --markdown or neither

$ socket package shallow npm socket@latest tenko babel-cli@^6.26
image

$ socket package shallow npm socket@latest tenko babel-cli@^6.26 --markdown
image

$ socket package shallow npm socket@latest tenko babel-cli@^6.26 --json
image

@pvdz pvdz requested a review from jdalton March 18, 2025 12:42
@pvdz pvdz changed the title [package score] Add replacement for info command [package shallow] Add replacement for info command Mar 18, 2025
@jdalton jdalton merged commit e36153d into main Mar 18, 2025
17 checks passed
@jdalton jdalton deleted the pkg_score branch March 18, 2025 20:59
jdalton added a commit that referenced this pull request Mar 19, 2025
* [package score] Add replacement for info command

* tests

* In light of recent findings, rename to `socket package shallow`

---------

Co-authored-by: John-David Dalton <jdalton@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants