{"_id":"@lavamoat/git-safe-dependencies","_rev":"13-ff8e4dcc72b218f72aac4ee6e5846722","name":"@lavamoat/git-safe-dependencies","dist-tags":{"latest":"1.0.3"},"versions":{"0.1.0":{"name":"@lavamoat/git-safe-dependencies","version":"0.1.0","keywords":["lockfile","security","github","dependencies","supply-chain"],"author":{"name":"naugtur"},"license":"MIT","_id":"@lavamoat/git-safe-dependencies@0.1.0","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"weizman","email":"weizmangal@gmail.com"},{"name":"lmbot","email":"leo.merinen@consensys.net"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-dependencies":"src/cli.js"},"dist":{"shasum":"5896d4e3972964f900f74809b207a03bbcbb90c5","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-0.1.0.tgz","fileCount":9,"integrity":"sha512-KhtdqJkOroMyiqfFJbyKOYxLkay+ZoXeNaPcjty5rLSJ2Yy0Bwhuk2twQF3C3IRAR0FF36KVzTsAA4281imMKA==","signatures":[{"sig":"MEUCIQDdGqBRt2CQNi/F5xa9NDRYzDlsnLFcrFb2PutF4PG5OQIgFD0YTTVc4CS42KnzhLJuiYkbXFbfeAjvS2GTGJKG7mA=","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":15904},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"602cf1f7143aab2fdee675b92eecbf756c0a3997","scripts":{"test":"ava"},"_npmUser":{"name":"lmbot","email":"leo.merinen@consensys.net"},"repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"10.9.0","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"_nodeVersion":"22.12.0","dependencies":{"glob":"11.0.0","hosted-git-info":"8.0.2","lockfile-lint-api":"^5.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/git-safe-dependencies_0.1.0_1734710471092_0.8318630159832212","host":"s3://npm-registry-packages-npm-production"}},"0.1.1":{"name":"@lavamoat/git-safe-dependencies","version":"0.1.1","keywords":["lockfile","security","github","dependencies","supply-chain"],"author":{"name":"naugtur"},"license":"MIT","_id":"@lavamoat/git-safe-dependencies@0.1.1","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"weizman","email":"weizmangal@gmail.com"},{"name":"lmbot","email":"leo.merinen@consensys.net"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-dependencies":"src/cli.js"},"dist":{"shasum":"057ec55ebd6f8d0b228b517851fb7a645077ea44","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-0.1.1.tgz","fileCount":9,"integrity":"sha512-l+yC4A8rq+H2tTZ1bmq15aTK0Y3AkOzUI+7QZHHaW5IcG55+13Ha1qR3eIwpIwMBodBzNNImmBflUJwHnKXMdg==","signatures":[{"sig":"MEQCICfey1vd+UvUgdYmF2FiA+37yGqeXjAd3AenlR3Yh8QoAiBu4KNk0VpG+bKgblpYQ6qKROzPrHpVozPeF1aTgALr0A==","keyid":"SHA256:jl3bwswu80PjjokCgh0o2w5c2U4LhQAE57gj9cz1kzA"}],"unpackedSize":16203},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"bb928b8a8779ab3c46c11493197a24e9c85dc2d9","scripts":{"test":"ava"},"_npmUser":{"name":"boneskull","email":"boneskull@boneskull.com"},"repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"10.9.1","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"_nodeVersion":"22.11.0","dependencies":{"glob":"11.0.0","hosted-git-info":"8.0.2","lockfile-lint-api":"5.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/git-safe-dependencies_0.1.1_1736974507335_0.5294507099030707","host":"s3://npm-registry-packages-npm-production"}},"0.2.0":{"name":"@lavamoat/git-safe-dependencies","version":"0.2.0","keywords":["lockfile","security","github","dependencies","supply-chain"],"author":{"name":"naugtur"},"license":"MIT","_id":"@lavamoat/git-safe-dependencies@0.2.0","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"weizman","email":"weizmangal@gmail.com"},{"name":"lmbot","email":"leo.merinen@consensys.net"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-actions":"src/cli-actions.js","git-safe-dependencies":"src/cli.js"},"dist":{"shasum":"d367eadc8ee96c73b520911ab99c1329def697e1","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-0.2.0.tgz","fileCount":12,"integrity":"sha512-UIggpM5iPvoOQC6ZTQWFYFw3RmnuBv1DOUElap2BYms0WzxpcAuWeVrbTYI5DTFSqMMNUcUKj5oI2iLdEmC1Tg==","signatures":[{"sig":"MEYCIQC/wlCIuogSuYF+AGaNJFB7V/M1WHFb3Wkr9809BpmIaQIhALOmwtYOeK5qz1lE+T+wNWYAMYaHT9PEPQHKafj4tdWz","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":22565},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"bbdbf7bf80468bd1769ecf9f0081d4dfdb04da91","scripts":{"test":"ava"},"_npmUser":{"name":"lmbot","email":"leo.merinen@consensys.net"},"repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"10.8.2","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"_nodeVersion":"20.18.1","dependencies":{"glob":"11.0.0","js-yaml":"4.1.0","hosted-git-info":"8.0.2","lockfile-lint-api":"5.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/git-safe-dependencies_0.2.0_1738167362599_0.9994719845215336","host":"s3://npm-registry-packages-npm-production"}},"0.2.1":{"name":"@lavamoat/git-safe-dependencies","version":"0.2.1","keywords":["lockfile","security","github","dependencies","supply-chain"],"author":{"name":"naugtur"},"license":"MIT","_id":"@lavamoat/git-safe-dependencies@0.2.1","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"weizman","email":"weizmangal@gmail.com"},{"name":"lmbot","email":"leo.merinen@consensys.net"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-actions":"src/cli-actions.js","git-safe-dependencies":"src/cli.js"},"dist":{"shasum":"e1b525ddb2c3f1694d18f1f316c22520c4e7a50e","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-0.2.1.tgz","fileCount":12,"integrity":"sha512-d34SFeERudRe/NAS3FvIGS4Os8QhEanZPR1tRBU4eXNoW5GwluSV8mhrf8gwDaaUz59zE+PIi/zIV01WhY3y8A==","signatures":[{"sig":"MEQCIHMrNDia9o8DKke4IMgqdeNOpFZ53kLgCtcaqCGszC19AiAaliEJQZUeUSt4++PqtnlezDqIcJycBJwUDRD1r2MRKA==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":23109},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"f51c9631ff2fbf4d405bb7b9d3b98057142b9363","scripts":{"test":"ava"},"_npmUser":{"name":"lmbot","email":"leo.merinen@consensys.net"},"repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"10.9.2","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"_nodeVersion":"22.13.1","dependencies":{"glob":"11.0.0","js-yaml":"4.1.0","hosted-git-info":"8.0.2","lockfile-lint-api":"5.9.1"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/git-safe-dependencies_0.2.1_1741712251141_0.3631702467930029","host":"s3://npm-registry-packages-npm-production"}},"0.2.2":{"name":"@lavamoat/git-safe-dependencies","version":"0.2.2","keywords":["lockfile","security","github","dependencies","supply-chain"],"author":{"name":"naugtur"},"license":"MIT","_id":"@lavamoat/git-safe-dependencies@0.2.2","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"weizman","email":"weizmangal@gmail.com"},{"name":"lmbot","email":"leo.merinen@consensys.net"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-actions":"src/cli-actions.js","git-safe-dependencies":"src/cli.js"},"dist":{"shasum":"66d1541bc168919919ba2a219acd35d62639f757","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-0.2.2.tgz","fileCount":12,"integrity":"sha512-g7T+NPN7r+Cg9HAZUsOWN3tidqE86YQvlsS4I1axhtBveXKeBV4gShcgjHP0y0pJT6pmZJWZQMkQ3FWVEOEbNQ==","signatures":[{"sig":"MEUCIFUt8sJQGJk1uM66I6e2XNEb42dPNphpyhHGMspQSIbwAiEArnEVJGmvBZ6w1Aotgh4Csxhvewf47Bf3DlI3mPb6GZo=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":23768},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"0941e2ca7d7f5afb0b467c211c313f7af984100d","scripts":{"test":"npm run test:run","test:run":"ava","test:update":"ava --update-snapshots"},"_npmUser":{"name":"naugtur","email":"naugtur@gmail.com"},"repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"10.9.2","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"_nodeVersion":"22.14.0","dependencies":{"glob":"11.0.0","js-yaml":"4.1.0","hosted-git-info":"8.1.0","lockfile-lint-api":"5.9.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/git-safe-dependencies_0.2.2_1746445327161_0.9218126186025768","host":"s3://npm-registry-packages-npm-production"}},"0.3.0":{"name":"@lavamoat/git-safe-dependencies","version":"0.3.0","keywords":["lockfile","security","github","dependencies","supply-chain"],"author":{"name":"naugtur"},"license":"MIT","_id":"@lavamoat/git-safe-dependencies@0.3.0","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"}],"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-actions":"src/cli-actions.js","git-safe-dependencies":"src/cli.js"},"dist":{"shasum":"839fb9b361a18b5f42eef934f8fcdd15a824eadb","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-0.3.0.tgz","fileCount":13,"integrity":"sha512-dqxtQYNZ7a92Puz+v276Z+EcBUC/YuqR+QUQxR2659rs47dSG8l8WQZwsNYeXf04BK3cVS87OXvTrmoGI7RF1Q==","signatures":[{"sig":"MEYCIQDY6lZaYhRBIK657E3U/tZ8Hl2gCDp/mfRZil+RfLXYYgIhAMYQclLtyigV1VeLtV/+Nxj7ukc+HDgK5OF7W5pSF2Eu","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":25662},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"a2c8136677b9540b180b6be82e54257880dbb1ee","scripts":{"test":"npm run test:run","test:run":"ava","test:update":"ava --update-snapshots"},"_npmUser":{"name":"naugtur","email":"naugtur@gmail.com"},"repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"10.9.2","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"_nodeVersion":"22.17.0","dependencies":{"glob":"11.0.0","js-yaml":"4.1.0","hosted-git-info":"8.1.0","lockfile-lint-api":"5.9.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/git-safe-dependencies_0.3.0_1756111015269_0.9517052911878838","host":"s3://npm-registry-packages-npm-production"}},"0.3.1":{"name":"@lavamoat/git-safe-dependencies","version":"0.3.1","keywords":["lockfile","security","github","dependencies","supply-chain"],"author":{"name":"naugtur"},"license":"MIT","_id":"@lavamoat/git-safe-dependencies@0.3.1","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-actions":"src/cli-actions.js","git-safe-dependencies":"src/cli.js"},"dist":{"shasum":"4eedb6815372478195bec4409c4a7912b9a8bd4c","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-0.3.1.tgz","fileCount":13,"integrity":"sha512-CiudPzINYG1Yufv9BjDDtyaPw22vYmCqzwJo3aWLPEFkhctn78Njd5g/oJ86rneezMBdXMLeP3ju40lrOg0IXQ==","signatures":[{"sig":"MEYCIQDuC3hHAtpMsY889sF/pFJEltAex4d3rqdhQ2DBKxXHpAIhAM77+UHVneffbyis+F0k1OZErK0cqVMn9DlMB3m5y6dK","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":26218},"main":"src/index.js","engines":{"node":">=20.0.0"},"gitHead":"3a2edd40482b0f06ebd95eb08054ceb073c6ecdf","scripts":{"test":"npm run test:run","test:run":"ava","test:update":"ava --update-snapshots"},"_npmUser":{"name":"boneskull","email":"boneskull@boneskull.com"},"repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"11.6.1","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"_nodeVersion":"24.11.0","dependencies":{"glob":"11.1.0","js-yaml":"4.1.1","hosted-git-info":"8.1.0","lockfile-lint-api":"5.9.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/git-safe-dependencies_0.3.1_1763580245025_0.015001142335618889","host":"s3://npm-registry-packages-npm-production"}},"1.0.0":{"name":"@lavamoat/git-safe-dependencies","version":"1.0.0","keywords":["lockfile","security","github","dependencies","supply-chain"],"author":{"name":"naugtur"},"license":"MIT","_id":"@lavamoat/git-safe-dependencies@1.0.0","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-actions":"src/cli-actions.js","git-safe-dependencies":"src/cli.js"},"dist":{"shasum":"457f7742612929a1ba0299340d2028a9743e332a","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-1.0.0.tgz","fileCount":13,"integrity":"sha512-9y7vuxW8f8y15L8pLOuHcBcjIIbx0o5qQbsnxzL8HEFbQNvd2qO7UPLbhW5MNlB2CrqcesriEmcFfPyOUwMgAA==","signatures":[{"sig":"MEQCIAMF5ViOCaph6ArJbDbGlMdQP0OyG3zc+8iGIHO4NGVzAiBTd0pWqlRr+s/oczoS8C/k7JGLHm3hZ9ZLraJT+HIBgw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"unpackedSize":26927},"main":"src/index.js","engines":{"node":"^20.19.0 || ^22.5.1 || ^24.0.0"},"gitHead":"fdffea00295f7fd62bc94af6bd43890c33880b46","scripts":{"test":"npm run test:run","test:run":"ava","test:update":"ava --update-snapshots"},"_npmUser":{"name":"boneskull","email":"boneskull@boneskull.com"},"repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"11.6.2","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"_nodeVersion":"24.13.0","dependencies":{"glob":"11.1.0","js-yaml":"4.1.1","hosted-git-info":"8.1.0","lockfile-lint-api":"5.9.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/git-safe-dependencies_1.0.0_1774048200962_0.22875556152131926","host":"s3://npm-registry-packages-npm-production"}},"1.0.1":{"name":"@lavamoat/git-safe-dependencies","version":"1.0.1","keywords":["lockfile","security","github","dependencies","supply-chain"],"author":{"name":"naugtur"},"license":"MIT","_id":"@lavamoat/git-safe-dependencies@1.0.1","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-actions":"src/cli-actions.js","git-safe-dependencies":"src/cli.js"},"dist":{"shasum":"49c52ebe30adb58606ef935a7506438bb0b53569","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-1.0.1.tgz","fileCount":13,"integrity":"sha512-Z7cKKz1sZC3sbaiwtFbbVgX1I8tJCdsQ6/3yNKrhFWTweIOUJZvs5vmnvNWZg9KUW/y03WII6HzfmDM/MOQBvg==","signatures":[{"sig":"MEQCIGuKjQ3VEL1JDK9/nKeXQAPyEupk5TSjG28pxWU6h6ciAiBRTFkGQ1DyZ6ZU77L74aTmWv6K4Evx8BBC1oQXAJOAcw==","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lavamoat%2fgit-safe-dependencies@1.0.1","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":27292},"main":"src/index.js","_from":"file:/home/runner/work/_temp/lavamoat-tarballs/lavamoat-git-safe-dependencies-1.0.1.tgz","engines":{"node":"^20.19.0 || ^22.5.1 || ^24.0.0"},"scripts":{"test":"npm run test:run","test:run":"ava","test:update":"ava --update-snapshots"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","approver":{"name":"naugtur","email":"naugtur@gmail.com"},"trustedPublisher":{"id":"github","oidcConfigId":"oidc:2e8ca27e-0674-492e-ae66-a36f6d19bdfd"}},"_resolved":"/home/runner/work/_temp/lavamoat-tarballs/lavamoat-git-safe-dependencies-1.0.1.tgz","_integrity":"sha512-Z7cKKz1sZC3sbaiwtFbbVgX1I8tJCdsQ6/3yNKrhFWTweIOUJZvs5vmnvNWZg9KUW/y03WII6HzfmDM/MOQBvg==","repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"11.17.0","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"_nodeVersion":"24.16.0","dependencies":{"glob":"11.1.0","js-yaml":"4.2.0","hosted-git-info":"8.1.0","lockfile-lint-api":"5.9.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/git-safe-dependencies_1.0.1_1782389119462_0.28977703324659965","host":"s3://npm-registry-packages-npm-production"}},"1.0.2":{"name":"@lavamoat/git-safe-dependencies","version":"1.0.2","keywords":["lockfile","security","github","dependencies","supply-chain"],"author":{"name":"naugtur"},"license":"MIT","_id":"@lavamoat/git-safe-dependencies@1.0.2","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-actions":"src/cli-actions.js","git-safe-dependencies":"src/cli.js"},"dist":{"shasum":"8f57f1de7dc7f606dbd25335baaf881e6b71c9a1","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-1.0.2.tgz","fileCount":13,"integrity":"sha512-b5HtuVasiHyiZ+Mqcn7oN/AEo1w/cnZFnql4p8Y1KUy1pyWBafnirAwqC+6nr38/GhuHns6gPjWs03/dEXcEyA==","signatures":[{"sig":"MEUCIDl5SDcR4yaycknIc5Vq+ldzl3PdN4UIr7m9P1Bupfd6AiEAopc8sOp2eBEGbEAKTqd7zXb0fBm7kbTC3r3lmur6HH8=","keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U"}],"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lavamoat%2fgit-safe-dependencies@1.0.2","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"unpackedSize":27634},"main":"src/index.js","_from":"file:/home/runner/work/_temp/lavamoat-tarballs/lavamoat-git-safe-dependencies-1.0.2.tgz","engines":{"node":"^22.5.1 || ^24.0.0"},"scripts":{"test":"npm run test:run","test:run":"ava","test:update":"ava --update-snapshots"},"_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","approver":{"name":"boneskull","email":"boneskull@boneskull.com"},"trustedPublisher":{"id":"github","oidcConfigId":"oidc:2e8ca27e-0674-492e-ae66-a36f6d19bdfd"}},"_resolved":"/home/runner/work/_temp/lavamoat-tarballs/lavamoat-git-safe-dependencies-1.0.2.tgz","_integrity":"sha512-b5HtuVasiHyiZ+Mqcn7oN/AEo1w/cnZFnql4p8Y1KUy1pyWBafnirAwqC+6nr38/GhuHns6gPjWs03/dEXcEyA==","repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"11.19.1","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"_nodeVersion":"24.16.0","dependencies":{"glob":"11.1.0","js-yaml":"4.3.0","hosted-git-info":"8.1.0","lockfile-lint-api":"5.9.2"},"publishConfig":{"access":"public"},"_hasShrinkwrap":false,"_npmOperationalInternal":{"tmp":"tmp/git-safe-dependencies_1.0.2_1788482956355_0.2585736107848209","host":"s3://npm-registry-packages-npm-production"}},"1.0.3":{"_id":"@lavamoat/git-safe-dependencies@1.0.3","ava":{"files":["test/*.spec.js"],"timeout":"30s"},"bin":{"git-safe-actions":"src/cli-actions.js","git-safe-dependencies":"src/cli.js"},"bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"dist":{"shasum":"83cd3619d37c17b03ddc9c332f0033fbbca14ef9","tarball":"https://registry.npmjs.org/@lavamoat/git-safe-dependencies/-/git-safe-dependencies-1.0.3.tgz","integrity":"sha512-GBWrhlCDEo7uAjtxwKC0pD4gSFsw9Gw9dMnuZyVWFaUvSXTG10lereHPeaqYc9Wbm3Ifnt+WHm1hqJRHoxbTFA==","fileCount":13,"unpackedSize":27968,"attestations":{"url":"https://registry.npmjs.org/-/npm/v1/attestations/@lavamoat%2fgit-safe-dependencies@1.0.3","provenance":{"predicateType":"https://slsa.dev/provenance/v1"}},"signatures":[{"keyid":"SHA256:DhQ8wR5APBvFHLF/+Tc+AYvPOdTpcIDqOhxsBHRwC7U","sig":"MEQCICr6uyZIXwGEsu5v1051S+yyqE8eIGebLSTJX1WVfWWEAiBBApikL6aRTiWObJG1agNQKmP8MDMeBlFjOZWUIsJOPA=="}]},"main":"src/index.js","name":"@lavamoat/git-safe-dependencies","_from":"file:/home/runner/work/_temp/lavamoat-tarballs/lavamoat-git-safe-dependencies-1.0.3.tgz","author":{"name":"naugtur"},"engines":{"node":"^22.5.1 || ^24.0.0"},"license":"MIT","scripts":{"test":"npm run test:run","test:run":"ava","test:update":"ava --update-snapshots"},"version":"1.0.3","_npmUser":{"name":"GitHub Actions","email":"npm-oidc-no-reply@github.com","trustedPublisher":{"id":"github","oidcConfigId":"oidc:2e8ca27e-0674-492e-ae66-a36f6d19bdfd"},"approver":{"name":"naugtur","email":"naugtur@gmail.com"}},"homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","keywords":["lockfile","security","github","dependencies","supply-chain"],"_resolved":"/home/runner/work/_temp/lavamoat-tarballs/lavamoat-git-safe-dependencies-1.0.3.tgz","_integrity":"sha512-GBWrhlCDEo7uAjtxwKC0pD4gSFsw9Gw9dMnuZyVWFaUvSXTG10lereHPeaqYc9Wbm3Ifnt+WHm1hqJRHoxbTFA==","repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"_npmVersion":"11.20.0","description":"Opinionated dependency linter for your git/github dependencies","directories":{"test":"test"},"maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"_nodeVersion":"24.16.0","dependencies":{"glob":"11.1.0","js-yaml":"4.3.2","hosted-git-info":"8.1.0","lockfile-lint-api":"5.9.2"},"publishConfig":{"access":"public"},"_npmOperationalInternal":{"host":"s3://npm-registry-packages-npm-production","tmp":"tmp/git-safe-dependencies_1.0.3_1790338480193_0.9582569216779326"},"_hasShrinkwrap":false}},"time":{"created":"2024-12-20T16:01:10.943Z","modified":"2026-09-25T12:14:40.627Z","0.1.0":"2024-12-20T16:01:11.263Z","0.1.1":"2025-01-15T20:55:07.563Z","0.2.0":"2025-01-29T16:16:02.790Z","0.2.1":"2025-03-11T16:57:31.284Z","0.2.2":"2025-05-05T11:42:07.365Z","0.3.0":"2025-08-25T08:36:55.463Z","0.3.1":"2025-11-19T19:24:05.211Z","1.0.0":"2026-03-20T23:10:01.112Z","1.0.1":"2026-06-25T12:05:19.547Z","1.0.2":"2026-09-04T00:49:16.451Z","1.0.3":"2026-09-25T12:14:40.282Z"},"bugs":{"url":"https://github.com/LavaMoat/LavaMoat/issues"},"author":{"name":"naugtur"},"license":"MIT","homepage":"https://github.com/LavaMoat/LavaMoat/blob/main/packages/git-safe-dependencies/README.md","keywords":["lockfile","security","github","dependencies","supply-chain"],"repository":{"url":"git+https://github.com/LavaMoat/LavaMoat.git","type":"git","directory":"packages/git-safe-dependencies"},"description":"Opinionated dependency linter for your git/github dependencies","maintainers":[{"name":"kumavis","email":"aaron@kumavis.me"},{"name":"naugtur","email":"naugtur@gmail.com"},{"name":"boneskull","email":"boneskull@boneskull.com"}],"readme":"# git-safe-dependencies\n\n> WARNING: This is an alpha version. The opinions are still forming and anything can change at any time. Test coverage is incomplete. Use at your own risk.\n\nValidate your `package.json` and lockfile (NPM, Yarn classic or Yarn Berry) and your GitHub Actions workflow files against an opinionated set of rules around using git dependencies that we at LavaMoat recommend.  \nNo configuration, no excuses.\n\n## Installation\n\nYou can install `@lavamoat/git-safe-dependencies` using npm:\n\n```sh\nnpm install --save-dev @lavamoat/git-safe-dependencies\n```\n\n## Usage\n\n```\ngit-safe-dependencies [--type=yarn|npm] [--ignore=file.json] [--projectRoot=path]\n```\n\n- `--type=npm|yarn` - Specify the type of lockfile to lint if it's not obvious from the file name. Supported values are dictated by `lockfile-lint` package.\n- `--ignore=file.json` - Specify a JSON file with a list of problem IDs to ignore (if you must). Keep the file version controlled to track who ignored what and why.\n- `--projectRoot=path` - Specify the root of the project to lint. Defaults to the current working directory.\n\n```\ngit-safe-actions [--workflows=path] [--ignore=file.json]\n```\n\n- `--ignore=file.json` - Specify a JSON file with a list of problem IDs to ignore (if you must). Keep the file version controlled to track who ignored what and why.\n- `--workflows=path` - Specify the path to the directory with GitHub Actions workflow files. Defaults to `.github` and searches recursively.\n\n### Programmatic usage\n\nWIP, but do try :)\n\n```js\nconst gitSafeDependencies = require('@lavamoat/git-safe-dependencies')\n```\n\nTODO: design a more granular programmatic API\n\n## FAQ\n\n#### Why is this not a plugin/rule for one of the many linters?\n\n- It makes http requests and that's unlikely to vibe with any linter.\n","readmeFilename":"README.md"}