Sign in
← Back to search
github Archived

spaceraccoon/npm-scan

An extensible, heuristic-based vulnerability scanning tool for installed npm packages

1 awesome list

Quick read

Stars
50
Forks
8
Open issues
7
Commits
108

Activity and growth

Latest capture 2026-10-18 09:45

Stars · last 7 days
0 0.0%
Commits · last 7 days
0 0.0%
Stars since tracking
0
Stored snapshots
1

Metadata

Language
JavaScript
License
GPL-3.0
Default branch
master
Created
2018-12-03
First commit
2018-12-03
Last pushed
2021-08-10
GitHub updated
2024-09-25
Last synced
2026-10-18 09:45
Stack scanned
2026-10-18 09:45
Archived
Yes

Archive status reflects the last catalog sync, not a maintenance assessment. Check recent releases, issue responses, and fit for your project with the repository shortlisting checklist.

Sign in to like spaceraccoon/npm-scan
README View on GitHub

AI development signals

0 paths

Agent instructions and tool configuration found in this repository.

No config files detected.

Growth history

Tracked growth

1 observed capture since 2026-10-18. Observed captures are shown by default.

Stars from first capture 0

Chart data

Observed captures only

Time horizon

All tracked data

Custom date range

Stars history

Observed snapshots

Commits history

Observed snapshots

Similar repositories

Nearest indexed repositories by embedding similarity.

nxgn-kd01/shai-hulud-scanner

Detect the Shai Hulud 2.0 npm supply chain attack (796+ packages). Scans for malicious files, hashes, and compromised ecosystems. Fast, accurate scanner.

4 stars
Shell 1 awesome list

lirantal/is-website-vulnerable

finds publicly known security vulnerabilities in a website's frontend JavaScript libraries

2,043 stars
JavaScript 2 awesome lists

nxgn-kd01/react2shell-scanner

Detect CVE-2025-55182 (React2Shell) RCE vulnerability in React Server Components. Fast, accurate scanner with zero false positives.

3 stars
Shell 1 awesome list

snyk-labs/snync

Mitigate security concerns of Dependency Confusion supply chain security risks

53 stars
JavaScript 1 awesome list

mbalabash/sdc-check

Small tool to inform you about potential risks in project dependencies list

141 stars
TypeScript 1 awesome list

OWASP/cve-lite-cli

Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.

770 stars
TypeScript 1 awesome list