mcp-server-semgrep/semgrep-rules/json/npm/security/package-dependencies-check.package.json

MCP Server for Semgrep Integration - static code analysis with AI

{
  "name": "some-internal-library",
  "version": "1.0.0",
  "license": "Apache-2.0",
  "dependencies": {

    // ruleid: package-dependencies-check
    "package1": "latest",
    // ruleid: package-dependencies-check
    "package2": "1.0.0 - 2.9999.9999",
    // ruleid: package-dependencies-check
    "package3": ">=1.0.2 <2.1.2",
    // ruleid: package-dependencies-check
    "package4": ">1.0.2 <=2.3.4",
    // ruleid: package-dependencies-check
    "package5": "<1.0.0 || >=2.3.1 <2.4.5 || >=2.5.2 <3.0.0",
    // ruleid: package-dependencies-check
    "package6": "~1.2",
    // ruleid: package-dependencies-check
    "package7": "~1.2.3",
    // ruleid: package-dependencies-check
    "package8": "2.x",
    // ruleid: package-dependencies-check
    "package9": "3.3.x",
    // ruleid: package-dependencies-check
    "package10": "^3.5.2",
    // ok: package-dependencies-check
    "package11": "http://asdf.com/asdf.tar.gz",
    // ok: package-dependencies-check
    "package12": "file:../dyl",
    // ok: package-dependencies-check
    "package13": "2.0.1",
    // ok: package-dependencies-check
    "package14": "1.1.0",
    //ok: package-dependencies-check
    "package15": "2.1.0-alpha.2",
    // ok: package-dependencies-check
    "@npm/package1": "1.1.0",
  }
}