Vrange CLI for npm

What does this MR do?

Add a vrange-compatible CLI to check node-semver (npm) versions, and tell if there are in range.

Related issues

gitlab-org/gitlab#14630 (closed)

changed milestone to %12.4

added Category:Dependency Scanning [DEPRECATED] backend backstage [DEPRECATED] devopssecure groupcomposition analysis labels

assigned to @adamcohen and unassigned @fcatteau

I'll probably rebase after merging !41 (merged), if things go as expected.

added 1 commit

• d0ac6300 - some adjustments

Compare with previous version

I applied some adjustments to produce the output according to our protocol. I will also add some test cases.

added 1 commit

• 9a2e93e2 - tests cases; renamed file to rangecheck.js

Compare with previous version

added 1 commit

• 2f0957ee - package-lock.json

Compare with previous version

unmarked as a Work In Progress

changed title from WIP: vrange CLI for npm to Vrange CLI for npm

changed the description

assigned to @fcatteau and unassigned @adamcohen

added 1 commit

• e0c8aff9 - error message wording

Compare with previous version

@julianthome Great! Thanks a lot! I've got a question about the tests, and fs.js has to be replaced with rangecheck.js in a few files. Back to you!

assigned to @julianthome and unassigned @fcatteau

mentioned in merge request !25 (merged)

added 1 commit

• 319f69ad - Apply suggestion to vrange/npm/README.md

Compare with previous version

added 1 commit

• 3819aed9 - Apply suggestion to vrange/npm/README.md

Compare with previous version

added 1 commit

• f2e5f8d4 - Apply suggestion to vrange/npm/README.md

Compare with previous version

added 2 commits

• 0e165d5b - add checks for exit code
• 53ca5a35 - Merge branch '14630-vrange-npm' of...

Compare with previous version

added 1 commit

• 76590938 - compute script name dynamically

Compare with previous version

resolved all threads

assigned to @fcatteau and unassigned @julianthome

Thanks Fabien. I addressed the comments mentioned above. Back to you

@adamcohen Could you approve this? It looks like I can't because I contributed the initial import.

assigned to @adamcohen and unassigned @fcatteau

approved this merge request

mentioned in commit 7d5446dc

merged

changed the description

added Category:Software Composition Analysis SCA:Dependency Scanning labels

mentioned in merge request !504 (closed)

mentioned in merge request !508 (closed)