safely install npm packages by auditing them pre-install stage
Appears on
Quick read
Latest capture 2026-10-18 09:42
Archive status reflects the last catalog sync, not a maintenance assessment. Check recent releases, issue responses, and fit for your project with the repository shortlisting checklist.
9 paths
Agent instructions and tool configuration found in this repository.
Agent instructions
GitHub Copilot 8
1 observed capture since 2026-10-18. Observed captures are shown by default.
Stars from first capture 0
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
A better `npm publish`
Mitigate security concerns of Dependency Confusion supply chain security risks
Audits an NPM package.json file to identify known vulnerabilities.
An extensible, heuristic-based vulnerability scanning tool for installed npm packages
Security infrastructure your AI can't be — deterministic, daily CVE intel past your model's training cutoff, whole-repo-aware, author-independent, and shift-left: secure_prompt secures the prompt before code generation. The security MCP for vibe coding: 450 rules, 39 tools, CLI + doctor for Next.js, Supabase, Clerk, Stripe, Prisma, Hono & MCP.
List any node_modules 📦 dir in your system and how heavy they are. You can then select which ones you want to erase to free up space 🧹
