2016-09-22 12:43:57 +00:00
---
title: About the npm Resource
---
# npm
Use the `npm` InSpec audit resource to test if a global NPM package is installed. NPM is the the package manager for Node.js packages (https://docs.npmjs.com), such as Bower and StatsD.
2017-10-03 21:35:10 +00:00
<br>
2016-09-22 12:43:57 +00:00
2016-09-27 19:03:23 +00:00
## Syntax
2016-09-22 12:43:57 +00:00
A `npm` resource block declares a package and (optionally) a package version:
2016-11-20 01:37:24 +00:00
describe npm('npm_package_name') do
2016-09-22 12:43:57 +00:00
it { should be_installed }
end
where
* `('npm_package_name')` must specify an NPM package, such as `'bower'` or `'statsd'`
* `be_installed` is a valid matcher for this resource
2017-10-03 21:35:10 +00:00
<br>
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
## Examples
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
The following examples show how to use this InSpec audit resource.
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
### Verify that bower is installed, with a specific version
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
describe npm('bower') do
it { should be_installed }
its('version') { should eq '1.4.1' }
end
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
### Verify that statsd is not installed
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
describe npm('statsd') do
it { should_not be_installed }
end
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
<br>
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
## Matchers
2016-09-22 12:43:57 +00:00
2018-01-31 12:24:16 +00:00
For a full list of available matchers please visit our [matchers page](https://www.inspec.io/docs/reference/matchers/).
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
### be_installed
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
The `be_installed` matcher tests if the named Gem package and package version (if specified) is installed:
2016-09-22 12:43:57 +00:00
2017-10-03 21:35:10 +00:00
it { should be_installed }
2016-09-22 12:43:57 +00:00
2016-09-27 19:03:23 +00:00
### version
2016-09-22 12:43:57 +00:00
The `version` matcher tests if the named package version is on the system:
its('version') { should eq '1.2.3' }