jouet deps info

• Usage: jouet deps info [--refresh] <PACKAGES>…

Say whether a package exists, its latest version, licence, repository and advisories

PKG is ECOSYSTEM:NAME[@VERSION], where ECOSYSTEM is cargo, npm, pypi or go. A bare NAME takes its ecosystem from the lockfile that locks it, or else from the one kind of manifest here (Cargo.toml, package.json, pyproject.toml or requirements.txt, go.mod). The version checked is the one given, else the one the lockfile locks, else the latest.

For a package that does not exist, crates.io's and npm's search name close matches; PyPI and the Go proxy have no search. Go modules have no licence in the proxy.

Exits 3 when a package does not exist (or has no such version), 1 when the version checked has an advisory or is yanked or retracted, or the package is deprecated, 4 when the lockfile locks it from somewhere other than the public registry (its name is not sent), and 5 when a registry or OSV cannot be reached.

Examples: jouet deps info cargo:serde_json jouet deps info npm:lodash@4.17.15 jouet deps info pypi:requests go:github.com/spf13/cobra jouet deps info zod

Arguments

• <PACKAGES>… — The packages: ECOSYSTEM:NAME[@VERSION], or a NAME the project's lockfile or manifest places

Flags

• --refresh — Ask the registry and OSV again rather than reading the cache
• -h --help — Print help