globeandmail / startr-cli

A command-line scaffolder for the startr R project template

startr-cli

A command-line scaffolder for the startr R project template. This will pull down the latest version of startr from GitHub, rewrite some project variables to your specified project name and initialize a fresh git repository.

Installation instructions

Make sure you have Node.js >= v14.19 (consider using NVM), then just:

npm install -g startr-cli

How to use

Just run create-startr in the directory you want your project in, then follow the prompts.

License

startr-cli © 2019 The Globe and Mail. It is free software, and may be redistributed under the terms specified in our MIT license.

Get in touch

If you've got any questions, feel free to send us an email, or give us a shout on Twitter:

Michael Pereira @__m_pereira	Tom Cardoso @tom_cardoso

startr-cli's Issues

[DepShield] (CVSS 7.5) Vulnerability due to usage of normalize-url:4.5.0

Vulnerabilities

DepShield reports that this application's usage of normalize-url:4.5.0 results in the following vulnerability(s):

• (CVSS 7.5) [CVE-2021-33502] The normalize-url package before 4.5.1, 5.x before 5.3.1, and 6.x before 6.0.1 f...

---

Occurrences

normalize-url:4.5.0 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.27.0
        └─ got:10.7.0
              └─ cacheable-request:7.0.1
                    └─ normalize-url:4.5.0

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 7.4) Vulnerability due to usage of ini:1.3.8

Vulnerabilities

DepShield reports that this application's usage of ini:1.3.8 results in the following vulnerability(s):

• (CVSS 7.4) CWE-471: Modification of Assumed-Immutable Data (MAID)

---

Occurrences

ini:1.3.8 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.27.0
        └─ node-pre-gyp:0.13.0
              └─ rc:1.2.8
                    └─ ini:1.3.8

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

[DepShield] (CVSS 8.1) Vulnerability due to usage of tar:4.4.13

Vulnerabilities

DepShield reports that this application's usage of tar:4.4.13 results in the following vulnerability(s):

• (CVSS 8.1) [CVE-2021-32804] The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3...
• (CVSS 8.1) [CVE-2021-32803] The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3...
• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
• (CVSS 7.5) CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

---

Occurrences

tar:4.4.13 is a transitive dependency introduced by the following direct dependency(s):

• nodegit:0.27.0
        └─ node-gyp:4.0.0
              └─ tar:4.4.13
        └─ node-pre-gyp:0.13.0
              └─ tar:4.4.13

_{This is an automated GitHub Issue created by Sonatype DepShield. Details on managing GitHub Apps, including DepShield, are available for personal and organization accounts. Please submit questions or feedback about DepShield to the Sonatype DepShield Community.}

Add startr as a fetch-only upstream remote

So that you can git pull upstream master into the repo you've created with create-startr to get the latest startr changes, as needed.