Skip to content

Installation

Installation

  • Node.js 18.0.0 or higher
  • npm or npx

Install the tool globally to use it anywhere:

Terminal window
npm install -g who-touched-my-packages

After installation, you can use the wtmp or who-touched-my-packages command:

Terminal window
wtmp --version

Run the tool directly without installing:

Terminal window
npx who-touched-my-packages

This is useful for:

  • One-time scans
  • CI/CD pipelines
  • Testing before installing

Install as a dev dependency in your project:

Terminal window
npm install --save-dev who-touched-my-packages

Add to your package.json scripts:

{
"scripts": {
"audit": "wtmp",
"audit:ci": "wtmp --json --fail-on HIGH"
}
}

Run with:

Terminal window
npm run audit

Check that the tool is installed correctly:

Terminal window
wtmp --version
# Output: 0.1.0
wtmp --help
# Shows all available options