Aquesta és una versió anterior. La versió actual és la 2.8.3. aube 2.8.3 · Data de publicació:
Fitxers d’instal·lació 1.23.0
| Arquitectura | Tipus | Àmbit | Mida del fitxer | Baixa | SHA256 |
|---|---|---|---|---|---|
| 64 bits | ZIP → Portable | — | — | github.com | VirusTotal |
| ARM64 | ZIP → Portable | — | — | github.com | VirusTotal |
L’enllaç i l’SHA256 provenen del manifest comunitari del Gestor de paquets del Windows. Convé comparar el hash del fitxer baixat abans d’executar-lo.
Notes de la versió
A small parity release: aube outdated learns how to check global installs, and aube audit --json finally emits the pnpm-shaped report its docs have always promised.
Added
- aube outdated -g / --global (#910 by @jdx) — outdated can now scan globally installed packages instead of a project's workspace, reusing the same table/JSON output and exit-code-1-on-drift behavior as project mode. An optional PATTERN argument filters by alias prefix (including multi-package global installs), and --global is mutually exclusive with --filter/--recursive. Global installs without a lockfile are skipped with a dedicated WARN_AUBE_GLOBAL_OUTDATED_NO_LOCKFILE warning and a checked: false JSON shape. render_json also now promotes duplicate package names to an array instead of overwriting. Closes the gap reported in discussion #906.
Fixed
- aube audit --json now matches pnpm's AuditReport shape (#900 by @colinhacks) — Previously --json printed the raw npm bulk-endpoint response ({ "<pkg>": [advisory, …] }), so the bundled help example aube audit --json | jq '.advisories | length' could never work. Output is now reshaped to:
{
"advisories": { "<id>": { /* advisory */ } },
"metadata": {
"vulnerabilities": { "info": 0, "low": 0, "moderate": 0, "high": 0, "critical": 0 },
"dependencies": 0, "devDependencies": 0, "optionalDependencies": 0, "totalDependencies": 0
}
}
Advisories are re-keyed by numeric npm id (collapsing a single advisory affecting multiple packages into one entry); vulnerabilities counts unique ids across the five always-present severity buckets before the audit-level filter, while the advisories map is additionally level-filtered, matching pnpm's ordering. Dependency counts reflect the active --prod/--dev/--no-optional gating. --audit-level, --ignore/auditConfig, --ignore-unfixable, the default table output, and the --ignore-registry-errors {status,reason} sentinel are all unchanged. The "no dependencies to audit" path now also returns a well-formed empty report.
💚 Sponsor aube
aube is part of jdx.dev — an independent developer-tooling studio run by @jdx, also behind mise. Work on aube is funded entirely by sponsors.
If aube is saving your team install time or CI minutes, please consider sponsoring at jdx.dev. Individual and company sponsorships are what keep the project fast, free, and independent.