{"id":28378142,"url":"https://github.com/TrustSource/ts-node-client","last_synced_at":"2025-06-26T21:32:45.331Z","repository":{"id":42048526,"uuid":"80076036","full_name":"TrustSource/ts-node-client","owner":"TrustSource","description":"Plugin to integrate TrustSource (code compliance) with node","archived":false,"fork":false,"pushed_at":"2024-08-20T14:50:46.000Z","size":1526,"stargazers_count":1,"open_issues_count":0,"forks_count":1,"subscribers_count":7,"default_branch":"main","last_synced_at":"2025-06-06T02:20:39.078Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"https://www.trustsource.io","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/TrustSource.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2017-01-26T01:32:08.000Z","updated_at":"2024-08-20T14:33:23.000Z","dependencies_parsed_at":"2022-08-12T03:20:50.481Z","dependency_job_id":"b03b9072-9226-4177-a0f2-1362d6596058","html_url":"https://github.com/TrustSource/ts-node-client","commit_stats":{"total_commits":122,"total_committers":7,"mean_commits":"17.428571428571427","dds":"0.25409836065573765","last_synced_commit":"f0fe00eb405455833b96f458a6f0cc6516b20758"},"previous_names":["eacg-gmbh/ecs-node-client"],"tags_count":67,"template":false,"template_full_name":null,"purl":"pkg:github/TrustSource/ts-node-client","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TrustSource%2Fts-node-client","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TrustSource%2Fts-node-client/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TrustSource%2Fts-node-client/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TrustSource%2Fts-node-client/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/TrustSource","download_url":"https://codeload.github.com/TrustSource/ts-node-client/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/TrustSource%2Fts-node-client/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":260919634,"owners_count":23082814,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-05-30T02:05:47.581Z","updated_at":"2025-06-26T21:32:45.324Z","avatar_url":"https://github.com/TrustSource.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# TrustSource ts-node-client\n\n[![Version](https://img.shields.io/npm/v/ts-node-client.svg)](http://npm.im/ts-node-client)\n[![Downloads](https://img.shields.io/npm/dm/ts-node-client.svg)](http://npm-stat.com/charts.html?package=ts-node-client)\n[![Downloads](https://img.shields.io/npm/dt/ts-node-client.svg)](http://npm-stat.com/charts.html?package=ts-node-client)\n[![Apache-2.0 License](https://img.shields.io/npm/l/ts-node-client?style=flat-square)](http://opensource.org/licenses/Apache-2.0)\n\n[![npm package](https://nodei.co/npm/ts-node-client.png?downloads=true\u0026downloadRank=true\u0026stars=true)](https://nodei.co/npm/ts-node-client/)\n\n\u003e TrustSource node client - node module to transfer dependency information to TrustSource server.\n\n## Release 3.4.0\nMigrated to TrustSource API v2. Please ensure your `url` is updated to `https://api.trustsource.io`. \n\n\u003e PLEASE NOTE: API v1 is meanwhile deprecated. We plan to seize its functionality in September 30th, 2024. Starting from June, users of APIv1 will receive a deprecation notice. If you feel that this timeframe is too tough for you, please reach out to your engagement manager as soon as possible to clarify further proceedings.\n\n## Release 3.2.0\nPackage now support package-lock.json v.3\n\n## Release 3.1.0\nPackage now support yarn v.2+\n\n## Release 3.0.0\nPackage now is not including `npm` anymore. The addition has been done due to missing programmatic API in npm \u003e= 8.0.0 and in order to skip deprecated dependencies\n\nThis change affects the structure of scans slightly, but it heavily improves the scanner.\n\n## Requirements\n* node \u003e= 12.0.0 use **ts-node-client@3.1.+***\n\n## Older versions\n* node \u003e= 8.9.0\n* npm \u003c 8.0.0 use **ts-node-client@1.***\n* npm \u003e= 8.0.0 use **ts-node-client@2.***\n\n## Installation\nRun: `npm install --save-dev ts-node-client` or `yarn add --dev ts-node-client`\n\nYou can add `install_and_scan` script to the package.json file to install and transfer dependency information using one command `npm run install_and_scan`:\n\n```\n\"scripts\": {\n  \"install_and_scan\": \"npm install \u0026\u0026 ts-node-client -k apiKey -p Project\"\n},\n```\n\nTo store your credentials for automated transfer you may create `.tsrc.json` in your project directory or in your home directory to set credentials globally (not recommended!)\n\n`.tsrc.json` example:\n\n```\n{\n  \"apiKey\": \"apiKey\",\n  \"url\": \"https://api.trustsource.io\",\n  \"project\": \"Project Description\"\n}\n\n```\n\nUsage\n=====\n\nYou also may initiate transfer to TrustSource server manually by executing following command via terminal:\n\n```\nnode_modules/.bin/ts-node-client\nnode_modules/.bin/ts-node-client -k apiKey -p Project --breakOnWarnings false --breakOnViolations true\nnode_modules/.bin/ts-node-client -c config.json \n```\n```\nnpm / node module to transfer dependency information to TrustSource server.\n\nOptions:\n  --apiKey, -k    apiKey                                             [default: null]\n  --project, -p   Project name                                       [default: null]\n  --branch, -b    Scan branch                                        [default: null]\n  --tag, -t       Scan tag                                           [default: null]\n  --binaryLinks   Binary links separated by comma                    [default: null]\n  --url           url                                                [default: null]\n  --config, -c    Config path                                        [default: null]\n  --proxy         Proxy url like 'https://user:password@host:port'   [default: null]\n  --version       Prints a version                                   [default: null]\n  --saveAs, -o              Save as file (file name prefix)          [default: null]\n  --saveAsFormat, -f      Save as format (scan / cydx / spdx)       [default: null]\n  --debug                                                            [default: null]\n  --simulate                                                         [default: null]\n  --includeDevDependencies                                           [default: null]\n  --meteor                                                           [default: null]\n  --breakOnWarnings                                                  [default: null]\n  --breakOnViolations                                                [default: null]\n  --help          Prints a usage statement                           [boolean]\n\n```\nPLEASE NOTE: if you want to pass param into function\nyou should add value, for example:\n\n`--breakOnViolations true` or `--saveAs sbom`\n\n## Software bill of materials\n\n[View SBOM  \u003cimg alt=\"TrustSource\" src=\"https://app.trustsource.io/logo.png\" width=\"70\"/\u003e](https://app.trustsource.io/api/v1/public-BoM/ae0832c6-5a55-4aa8-8c45-75528d0833fb) \n\n## Known problems\n\n####  Error: The programmatic API was removed in npm v8.0.0\nYou should upgrade to 2.* versions of ts-node-client\n\n## Changelog available inside `CHANGELOG.md`\n\n## [DEPRECATED] Changelog \n\n#### 3.0.*\n- `npm.ls` cli -\u003e `package-lock.json` parse\n- npm removed\n- updated dependencies\n\n#### 2.1.*\n- Migrate 1.6.* - 1.8.* changes to version 2.1\n- Bump dependencies\n\n#### 2.0.*\n- Support new scan tool and fix problem with programmatic API for \u003e= npm@8.0.0\n- Stop usage of [`global-npm`](https://github.com/dracupid/global-npm) until we find new resolution\n- Get back `npm` as local dependency\n\n#### 1.8.*\n- SBOM\n- **--saveAs** and **--saveAsFormat**\n- Bump minimist from 1.2.5 to 1.2.6\n- Bump urijs from 1.19.10 to 1.19.11\n- replace packageurl-js with simple local function\n- improve docs\n\n#### 1.7.*\n- request -\u003e axios\n- fix dependencies\n- doc fixes\n\n#### 1.6.*\n- **--breakOnWarnings** and **--breakOnViolations**\n- Bump devDependencies\n\n#### 1.5.*\n- Describe `Error: The programmatic API was removed in npm v8.0.0`\n- Bump devDependencies\n- Introduce sonarjs\n\n#### 1.4.*\n- Bump glob-parent from 5.1.1 to 5.1.2\n- Bump path-parse from 1.0.6 to 1.0.7\n- Bump lodash from 4.17.19 to 4.17.21\n- Bump y18n from 4.0.0 to 4.0.1\n- Added:\n    - option **--includeDevDependencies**. It is allow to scan dev dependencies\n\n#### 1.3.*\n- Use [`global-npm`](https://github.com/dracupid/global-npm) (meaning `npm` is no longer a dependency of `ts-node-client`)\n\n#### 1.2.*\n- Added:\n    - option **--brakeOnViolations**. It is fail build in case any violations after scan transferred.\n    - option **--brakeOnWarnings**. It is fail build in case any warning after scan transferred.\n\n#### 1.1.*\n- userName is not required param for scans\n- Support usage of scan meta param binaryLinks inside Options definition\n\n#### 1.0.*\n- Node JS and dependencies updates \"node\": \"\u003e= 8.12.0\"\n\n#### 0.3.*\n- Improve variable usage and tasks migration\n- Support usage of scan meta params: branch and tag inside Options definition\n- Skip npmDependency without names\n- Update travis config\n- Update dependency to resolve vulnerabilities\n\n#### 0.2.*\n- Added proxy support and config\n- Update travis config\n- Updated README.md with `app.trustsource.io`\n- Updated default url to `app.trustsource.io`\n- Added windows support\n- Fixed json \n- **Removed:**\n    - options: **--credentials** and **--credentialsFile** instead you should use **--config**.\n    - option **--baseUrl** instead you should use **--url**.\n- Added:\n    - option **--config**. It is similar to credentials, but it will contain any config information.\n    - option **--url**. It is similar to baseUrl.\n    - option **--apiKey** and **--userName** so it will be unnecessary to create `.tsrc.json` file.\n    - options **--version** and **--help**.\n    - options shortcut.\n\n## License\n[Apache-2.0](https://github.com/TrustSource/ts-node-client/blob/master/LICENSE)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FTrustSource%2Fts-node-client","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FTrustSource%2Fts-node-client","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FTrustSource%2Fts-node-client/lists"}