vovacodes / find-duplicate-dependencies

Find duplicate dependencies in your node_modules. Useful when use npm as a package manager for front-end.

find-duplicate-dependencies

Finds duplicate dependencies in your node_modules. Useful when use npm as a package manager for front-end.

Install

for CLI usage

npm install -g find-duplicate-dependencies

for API usage

npm install find-duplicate-dependencies

Usage

CLI

find-duplicate-dependencies

This command exits with 1 if there are some duplicates and with 0 if there are not.

You can exclude some dependencies from check by passing --exclude option:

find-duplicate-dependencies --exclude express,react

API

const findDuplicateDependencies = require('find-duplicate-dependencies');

findDuplicateDependencies().then((duplicates) => {
  /*
  duplicates has the following format:

  {
    "tar": [
      {
        name: 'tar',
        version: '1.0.3',
        from: 'tar@>=1.0.0 <2.0.0',
        path: 'test/npm/node-gyp'
      },
      {
        name: 'tar',
        version: '2.1.1',
        from: 'tar@>=2.1.1 <2.2.0',
        path: 'test/npm'
      }
    ],
    "mime-types": [
      {
        name: 'mime-types',
        version: '2.1.2',
        from: 'mime-types@>=2.1.1 <3.0.0',
        path: 'test/npm/request/form-data'
      },
      {
        name: 'mime-types',
        version: '2.0.14',
        from: 'mime-types@>=2.0.1 <2.1.0',
        path: 'test/npm/request'
      }
    ]
  }
  */

  if (Object.keys(duplicates).length > 0) {
    printFailMessage(duplicates);
    return process.exit(1);
  }

  printSuccessMessage();
}).catch((error) => {
  console.error(error.stack);
  return process.exit(1);
});

find-duplicate-dependencies's Issues

Bump npm version to 8.x

Could you please bump the npm version to 8.x?

find-duplicate-dependencies uses color even when NO_COLOR=true

The inspect call is forcing color: true which is resulting in output that I can't inspect in a text editor, even if I set NO_COLOR=true, mostly negating the value of requiring 'picocolors'

option to only check production dependencies?

i'm not really concerned if i have duplicate dev deps

`npm.ls()` v4.4.2 changed output, breaking package

It looks like the return value of npm.ls() changed substantially as of npm v4.4.2 — search for "Stop flattening ls-tree output" here. Same-version dependencies are no longer deduped in npm.ls() as they are on-disk, meaning this reports everything that's depended upon multiple times as a dup. Missing dependencies are also returned, with missing: true on them and version: undefined.