Performing security tests inside your CI
The goal of this project is to provide additional features on top of the existing npm audit options
☔️A curated list of tools, articles & resources to help take your frontend security to the next level. Feel free to contribute!
Claude Code skill for running structured security audits with actionable remediation plans
Frontend to display data from huskyCI analyses
A handy tool to export npm audit results to a fully offline HTML page for a better view of your project's vulnerabilities.
Helps you understand and work through npm audit results
🛡️ AI-powered vulnerability scanner that automatically detects, analyzes, and fixes security issues in npm packages with intelligent code transformations. Supports GitHub Actions, CLI, Docker, and VS Code integration with Microsoft Teams notifications.
A beautiful, zero-config visual CVE dashboard for npm & Python. One command: npx osv-ui. 100% Local & Secure.
Supply-chain security scanner for npm packages. Detect malicious code, typosquatting, and compromised dependencies before you install them.
Trace vulnerable JavaScript dependencies and generate deterministic remediation paths for developers and AI coding agents.
Read-only TUI dashboard for npm-check-updates — see outdated dependencies (major/minor/patch) and npm audit vulnerabilities across all your projects at a glance.
A fast, zero-config CLI tool that scans your project dependencies and Dockerfiles for known security vulnerabilities — across 8 ecosystems, powered by free public vulnerability databases, with AI-powered analysis and scheduled scanning.
Runtime dependency-behavior monitor for Node.js. Two engines: in-process telemetry + an out-of-process (strace) trust boundary that sees native egress & persistence. Defense-in-depth for npm supply-chain attacks — SARIF, GitHub Action, zero deps.
Security gate for DeepSeek Harness plugins: npm advisory audit, static evidence, a call-time Allow once / Allow / Disable prompt, plugin-manager sync, and agent review.
Should I install this? Audit any npm package — or your whole project — before installing: real CVEs, the literal install-script command that runs on your machine, npm-accurate dependency count, maintainers, and a letter grade. Zero deps, no account, no AI.
Vulnerability triage via AST and symbol-level import analysis — separates alerts that matter from those that don't.
🛡️ Advanced NPM supply chain attack detection tool - Specialized in detecting Shai-Hulud compromise indicators with beautiful CLI interface and automated security reporting
Behavioral supply chain scanner for npm. Detects risky dependencies by signals, not signatures.
To associate your repository with the npm-audit topic, visit your repo's landing page and select "manage topics."