sharesight/Enforce Package Dependency Version

Enforce a package version for a dependency or dev-dependency.

Trust Signals

name	description	required	default
package	The name of the dependency to check.	yes	—
directory	Directory where your `package.json` can be found. Defaults to to `env.GITHUB_WORKSPACE`.	no	—
range	A semver range, eg. '^1.0.0', '1.0.0', '>=1.x', etc..	yes	—
version_prerelease	An optional prerelease target. Defaults to false. - `false` requires there is no prerelease. - `true` allows a prerelease—but it is not required! `1.2.3-prerelease` and `1.2.3` are both valid - `'prerelease'` means it must match that prerelease. - `'prerelease.#'` means it must match that prerelease and identifier.	no	false
allow_multiple_versions	Whether or not we allow multiple versions to be resolved, eg. you may have Typescript at `^4.2.0` in your codebase, but another package points to `3.x`. - `false` means this should only ever resolve to a single version (and that should match our range) - `true` allows all versions… NOTE: we only look at the first resolved version, assuming this is your version.	no	false

name	description
resolved_version	The resolved version of that dependency, eg. in `yarn.lock`
target_version	The target version of that dependency, eg. version in `package.json`