DhanushNehru / DhanushNehru/lockcheck

Add an --ignore CLI flag to skip specific packages

Closed Beginner friendly
#11 0 comments 0 reactions 0 assignees View on GitHub
enhancement good first issue
Dominant language
JavaScript
Stars
11
Forks
3
Avg merge
1d 17h
Merged PRs (30d)
3

Description

Sometimes a developer might have an internal private package that accidentally triggers the "Typosquat" or "Freshness" warnings. Instead of requiring a full configuration file, we should allow them to pass a quick inline flag to ignore certain packages.

**Example usage:**

`npx @dhanushnehru/lockcheck --ignore my-internal-lib,weird-name-pkg`

**Acceptance Criteria:**
-
- Parse the `--ignore` string in `bin/lockcheck.js` and split it by commas.
- Pass the array of ignored package names down into the `scan()` options.
- Filter out any findings in `src/index.js` where `finding.name` matches the ignored list before calculating the final exit code.

Contributor guide

Open the contributing guide

Research direction

Start in bin/lockcheck.js by tracing how CLI options are parsed, then follow the options into scan() and inspect src/index.js where findings are evaluated for the final exit code. Verify the example command with comma-separated package names and confirm matching findings no longer affect the exit status.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript, node.js
Domain
cli, security
Issue type
Feature
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Quiet
Clarity
Clearly specified
Newbie friendliness
78/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.