https://github.com/dwisiswant0/nodep

A tool for check available dependency packages across npmjs, PyPI or RubyGems registry.
https://github.com/dwisiswant0/nodep

bugbounty bugbounty-tool gem go golang npm npmjs pip pypi rubygems

Last synced: 3 months ago
JSON representation

A tool for check available dependency packages across npmjs, PyPI or RubyGems registry.

• Host: GitHub
• URL: https://github.com/dwisiswant0/nodep
• Owner: dwisiswant0
• License: mit
• Created: 2021-02-10T20:32:04.000Z (almost 4 years ago)
• Default Branch: master
• Last Pushed: 2022-03-02T15:44:22.000Z (almost 3 years ago)
• Last Synced: 2024-09-29T15:20:13.253Z (4 months ago)
• Topics: bugbounty, bugbounty-tool, gem, go, golang, npm, npmjs, pip, pypi, rubygems
• Language: Go
• Homepage:
• Size: 3.91 KB
• Stars: 27
• Watchers: 2
• Forks: 3
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE

Awesome Lists containing this project

README

        
```

nodep — check available dependency packages across npmjs, PyPI or RubyGems registry.

Installation (with Go):

$ go get -u github.com/dwisiswant0/nodep

Or download pre-built binary from releases page (https://github.com/dwisiswant0/nodep/releases/latest).

Usage of nodep:

  nodep  

Available registry options:

  - npm (npmjs)

  - pip (PyPI)

  - gem (RubyGems)

Examples:

  nodep pip reqeusts

  nodep npm package.txt

Supporting Materials:

- Birsan, Alex. “Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies.” Medium, February 9, 2021, https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610.

- Tschacher, Nikolai. “Typosquatting Programming Language Package Managers.” incolumitas.com, June 8, 2016, https://incolumitas.com/2016/06/08/typosquatting-package-managers/.

```