vltpkg/Dependency Policies
Run vlt dependency policies as CI gates — check for malware, outdated deps, license compliance, and more.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| query | Single vlt query selector (e.g. ":malware") | no | — |
| queries | Multiple vlt query selectors, one per line. Each line can include flags like --expect-results. Example: :malware --expect-results=0 :outdated --view=json | no | — |
| expect-results | Expected result count for single query (e.g. "0", ">5", "<=10") | no | — |
| view | Output format: human, json, mermaid, count | no | — |
| scope | Scope query selector for top-level packages | no | — |
| target | Target query selector (alternative to positional query) | no | — |
| working-directory | Working directory for running vlt query (defaults to repository root) | no | — |
| show-results | Show query output in logs and summary when queries fail. Set to "always" to show for all queries, "never" to hide, or "failed" (default) to show only for failed queries. | no | failed |
Outputs
| name | description |
|---|---|
| results | JSON array of query results |
| passed | Whether all queries passed their expectations |