miragon/Pin npm Dependencies
Fails the build if any npm dependency uses a version range (^ or ~) instead of a pinned version.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| files | Newline-separated list of explicit package.json paths to check. When set, root-path is ignored. | no | "" |
| root-path | Root directory to scan recursively for package.json files (node_modules, .git, dist, build excluded). Used when files is not set. | no | . |
| check-peer-dependencies | Also check peerDependencies (default: false, since ranges are common there) | no | false |
| check-optional-dependencies | Also check optionalDependencies (default: true, since these are typically installed) | no | true |
Outputs
no outputs