You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
-[Check dependencies introduced through the CLI](#check-dependencies-introduced-through-the-cli)
22
20
-[Selector method](#selector-method)
23
21
-[Configuration file](#configuration-file)
22
+
-[Cache] (#cache)
23
+
-[Using `Twyn` as a library] (#using-twyn-as-a-library)
24
24
25
25
## Overview
26
-
Twyn is a security tool that compares the name of your dependencies against a set of the most popular ones,
26
+
`Twyn` is a security tool that compares the name of your dependencies against a set of the most popular ones,
27
27
in order to determine if there is any similarity between them, preventing you from using a potentially illegitimate one.
28
-
In short, Twyn protects you against [typosquatting attacks](https://en.wikipedia.org/wiki/Typosquatting).
28
+
In short, `Twyn` protects you against [typosquatting attacks](https://en.wikipedia.org/wiki/Typosquatting).
29
29
30
30
It works as follows:
31
31
32
32
1. Either choose to scan the dependencies in a dependencies file you specify (`--dependency-file`) or some dependencies introduced through the CLI (`--dependency`). If no option was provided, it will try to find a dependencies file in your working path.
33
33
2. If the name of your package name matches with the name of one of the most well known packages, the package is accepted.
34
-
3. If the name of your package is similar to the name of one of the most used packages, Twyn will prompt an error.
35
-
4. If your package name is not in the list of the most known ones and is not similar enough to any of those to be considered misspelled, the package is accepted. Twyn assumes that you're using either a not so popular package (therefore it can't verify its legitimacy) or a package created by yourself, therefore unknown for the rest.
34
+
3. If the name of your package is similar to the name of one of the most used packages, `Twyn` will prompt an error.
35
+
4. If your package name is not in the list of the most known ones and is not similar enough to any of those to be considered misspelled, the package is accepted. `Twyn` assumes that you're using either a not so popular package (therefore it can't verify its legitimacy) or a package created by yourself, therefore unknown for the rest.
36
36
37
37
## Quickstart
38
38
39
39
### Installation
40
40
41
-
Twyn is available on PyPi repository, you can install it by running
41
+
`Twyn` is available on PyPi repository, you can install it by running
42
42
43
43
```sh
44
44
pip install twyn
45
45
```
46
46
47
47
### Docker
48
48
49
-
Twyn provides a Docker image, which can be found [here](https://hub.docker.com/r/elementsinteractive/twyn).
49
+
`Twyn` provides a Docker image, which can be found [here](https://hub.docker.com/r/elementsinteractive/twyn).
50
50
51
51
Use it like so:
52
52
@@ -69,6 +69,18 @@ For a list of all the available options as well as their expected arguments run:
69
69
twyn run --help
70
70
```
71
71
72
+
### JSON format
73
+
If you want your output in JSON format, you can run `Twyn` with the following flag:
0 commit comments