@financial-times/di2-whitesource

The actual whitesource NPM library has some opportunities for improvement. We've wrapped it up here to realise those opportunities and stop that extra code leaking into all our projects.

Stats

StarsIssuesVersionUpdatedCreatedSize
@financial-times/di2-whitesource
2.0.14 years ago4 years agoMinified + gzip package size for @financial-times/di2-whitesource in KB

Readme

di2-whitesource

The actual whitesource NPM library has some opportunities for improvement. We've wrapped it up here to realise those opportunities and stop that extra code leaking into all our projects.

How to use actually?

npm install --save-dev @financial-times/di2-whitesource

Then in your Makefile deploy-prod task add whitesource --prod, and whitesource to your deploy-latest task.

(Note: it's recommended to add the whitesource / whitesource --prod tasks before the deploy has happened so that bad code never hits production.)

It is also recommended to add the following line to your .gitignore file:-

WhiteSource-log-files

API

The following command runs whitesource with the given product name:-

whitesource "My Really Cool Product"

The following command runs whitesource with the given product name and adds -prod as a suffix to the project name:-

whitesource "My Really Cool Product" --prod

Add the following option to get whitesource to also check development dependencies (default is just to check production dependencies)

--include-dev-deps

Won't I need some kind of API key?

Yes, you will. It's in LastPass and it's called WHITESOURCE_API_KEY.

If you find any bugs or have a feature request, please open an issue on github!

The npm package download data comes from npm's download counts api and package details come from npms.io.