The from command allows you to run a security analysis on a specific npm package, which must be available in the npm registry. This command is useful for evaluating the security of a package before including it in your project.
$ nsecure from <spec> [options]Scanning version 3.0.0 of express and saving the result into ./express-report.json
$ nsecure from express@3.0.0 -o express-report| Name | Shortcut | Default Value | Description |
|---|---|---|---|
--depth |
-d |
Infinity |
Maximum tree depth to scan. |
--silent |
false |
Suppress console output, making execution silent. | |
--output |
-o |
nsecure-result |
Specify the output file for the results. |
--vulnerabilityStrategy |
-s |
github-advisory | Strategy used to fetch package vulnerabilities (see Vulnera available strategy). |
--contacts |
-c |
[] |
List of contacts to highlight. |