# npm-audit-plus-plus

> A tool to capture the output of npm audit and convert it to xml

Latest version **1.1.1** (published 2023-12-12) · ISC license · 0 weekly downloads

## Install

```sh
npm install npm-audit-plus-plus
pnpm add npm-audit-plus-plus
yarn add npm-audit-plus-plus
bun add npm-audit-plus-plus
```

Provides the command `npm-audit-plus-plus`.

## Health

**Score 25/100 (F)** — status: abandoned.

Positive: no vulnerabilities.

Warnings: low downloads; no types; no esm support.

Negative: abandoned.

## Facts

| | |
|---|---|
| Version | 1.1.1 |
| Published | 2023-12-12 |
| First published | 2023-10-31 |
| Weekly downloads | 0 |
| License | ISC |
| TypeScript types | none |
| Module format | CommonJS |
| Dependencies | 2 |
| Unpacked size | 380.3 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 1 |
| Maintainers | rkristelijn |
| Keywords | npm, audit, xml, gitlab, pipeline, security, dependency management, ignore, vulnerabilities, continuous integration |

## Links

- npm: https://www.npmjs.com/package/npm-audit-plus-plus
- Repository: https://github.com/rkristelijn/npm-audit-plus-plus
- Homepage: https://github.com/rkristelijn/npm-audit-plus-plus#readme
- Issues: https://github.com/rkristelijn/npm-audit-plus-plus/issues
- npm.io page: https://npm.io/package/npm-audit-plus-plus

## Dependencies (2)

- [commander](https://npm.io/package/commander.md) ^11.1.0
- [xmlbuilder2](https://npm.io/package/xmlbuilder2.md) ^3.1.1

## Alternatives

- [babylon](https://npm.io/package/babylon.md) — 5.1M weekly downloads
- [csscolorparser](https://npm.io/package/csscolorparser.md) — 3.7M weekly downloads
- [expr-eval-fork](https://npm.io/package/expr-eval-fork.md) — 1.5M weekly downloads
- [@leeoniya/ufuzzy](https://npm.io/package/@leeoniya/ufuzzy.md) — 247.7K weekly downloads
- [xml-parser](https://npm.io/package/xml-parser.md) — 78.4K weekly downloads

## Recent versions

- 1.1.1 (latest) — 2023-12-12
- 1.1.0 — 2023-11-02
- 1.0.14 — 2023-11-01
- 1.0.13 — 2023-11-01
- 1.0.12 — 2023-11-01
- 1.0.11 — 2023-11-01
- 1.0.10 — 2023-11-01
- 1.0.9 — 2023-11-01
- 1.0.8 — 2023-11-01
- 1.0.7 — 2023-11-01
- 1.0.6 — 2023-11-01
- 1.0.5 — 2023-10-31
- 1.0.4 — 2023-10-31
- 1.0.3 — 2023-10-31
- 1.0.2 — 2023-10-31
- … 2 more at https://npm.io/package/npm-audit-plus-plus/versions

## README

# NPM Audit Plus Plus

This is a tool to help report `npm audit` in xml format for e.g. CI/CD for gitlab.

```
npm audit --json | npx npm-audit-plus-plus > npm-audit-plus-plus.xml
npm audit --production --json | npx npm-audit-plus-plus > npm-audit-plus-plus.xml
npm audit --omit=dev --json | npx npm-audit-plus-plus > npm-audit-plus-plus.xml
```

The tool is similar to [`npm-audit-plus`](https://github.com/freedomofpress/npm-audit-plus) but splits `npm audit` execution to be able to run `npm audit` with custom arguments.

## node version <= 14

Instead of npx you could use `npm i -D npm-audit-plus-plus@latest -f` to force to run it. Command has a limitation in package.json that it needs Node>16. But it seems to run fine with Node 14. Add a script to package.json:

```json
{
  "scripts": {
    "ci:audit": "npm audit --json --production | npm-audit-plus-plus > npm-audit.junit.xml"
  }
}
```

## Developing
- `npm i` - to install dependencies
- `npm t` - to parse all json files in `test/fixtures`. See if the changes are still valid.

## Docs

- [JUnit XML format](https://www.ibm.com/docs/en/developer-for-zos/14.1?topic=formats-junit-xml-format)
- [Gitlab JUnit parser info](https://gitlab.com/gitlab-org/gitlab/-/issues/299086)

---
_Source: https://npm.io/package/npm-audit-plus-plus · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._