Introduction

This package will fix other package known vulnerabilities by updating the version of the package to a stable, not vulnerable, version. This package do this based on npm audit fix, but better and ready to be implemented on automated pipelines.

It works on NodeJS v14, v16, v18 and v20.

Install

   npm i make-it-safer -D

Usage

   npx make-it-safer

Options

By default, the package fix all known vulnerabilities, but it can be used also to upgrade dependencies versions. See below:

- Update dependencies to the latest version

   npx make-it-safer --latest

- Update dependencies to the latest major version

   npx make-it-safer --major

- Update dependencies to the latest minor version

   npx make-it-safer --minor

- Update dependencies to the latest patch version

   npx make-it-safer --patch

Pipelines

This package is ready to be implemented on automated pipelines and git flow. You can use this way:

• With Husky
  • npx make-it-safer && git add -A . (use on the pre-commit hook)(can delay commit time)
• With pipelines
  • npx make-it-safer && git add -A . && git commit -m "(ci): fixed vulnerabilities" && git push

Aliases

   npx make-it-safer
   npx makeitsafer
   npx mis

Contributions

• The vulnerabilities fix scripts were made by taylorho.
• The packages updating scripts were made by wellwelwel, on the package packages-update. Thanks!

FOSS

Have an idea of improvement? Open an issue or a Pull Request! We are happily waiting your contribution :)