Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
7 daysStars78824h gain0Score0.6
Find trending repositories by name or description.
Fast, developer-friendly JS/TS dependency vulnerability scanner with local lockfile scanning, OSV matching, direct vs transitive visibility, --fix, JSON output, and practical remediation guidance.
Lint an npm or yarn lockfile to analyze and detect security issues
A gh CLI extension that generates and verifies the GitHub Actions dependency lockfile, pinning every action your workflows use to an exact commit.
Detection tools for the June 2026 atomic-lockfile AUR supply-chain attack. Consolidated from community Gists.