Skip to main content
Version: 6.x (latest)

Getting started

You can use NodeSource Certified Modules 3.0 (NCM 3) from the N|Solid Console or from the command line with ncm-cli. This page explains both options and how to install and authenticate ncm-cli.

N|Solid Console​

NodeSource Certified Modules 3.0 is available to NodeSource Accounts users directly in the N|Solid Console. When a process is connected, during debugging or in production, you get vulnerability information and AI-powered insights for the packages it loads. NCM 3 helps you manage code quality, security, and compliance over the lifetime of a Node.js project, with vulnerability data tailored to your organization's needs and notification practices.

See Using NCM3 with N|Solid.

NCM CLI​

ncm-cli is the command-line tool for NodeSource Certified Modules 3.0. Use it to generate a project report, fetch compliance and security information, manage your organization's whitelist, and inspect specific packages in detail.

Installation​

npm install -g ncm-cli

Usage​

"usage"

Authentication​

ncm-cli supports three forms of authentication.

1. NodeSource account​

Sign in interactively with your NodeSource account email and password:

ncm signin

2. Single sign-on​

  • Using a Google account: ncm signin -G, --google
  • Using a GitHub account: ncm signin -g, --github

3. Environment variable (CI/CD)​

NCM_TOKEN=<token> ncm <command> [options]

The token is a NodeSource Accounts service token. For CI/CD, give it the NCM Whitelist : read and NCM Certification Data : read permissions. To create one, see Service tokens.

NodeSource Support