Hacker GitHub

← All repos

lirantal/npq

View on GitHub ↗ ★ 1,795 JavaScript

safely install npm packages by auditing them pre-install stage

5 mentions on Hacker News by 5 people: 1 story, 4 comments · first 2018-07-13 · latest 2025-11-24

Mentions per year 5 mentions · busiest year 2025 (4)
20082026
AllStoriesComments NewestTopOldest
  1. …ways but here are few community tools: - https://socket.dev/blog/introducing-socket-firewall - https://github.com/lirantal/npq - https://bun.com/docs/pm/security-scanner-api source: https://github.com/bodadotsh/npm-security-best-practices?t…
    comment by tmvnty · 2025-11-24 · in Shai-Hulud Returns: Over 300 NPM Packages Infected
  2. …More from Liran: GitHub: https://github.com/lirantal NPQ Package Checker: https://github.com/lirantal/npq Snyk Blog: https://snyk.io/blog LinkedIn: https://linkedin.com/in/talliran If you're dealing with supply chain risk, AI code g
    comment by neciudan · 2025-11-19
  3. …* There's quite a few tools to help mitigate the risk here, like https://socket.dev and npq ( https://github.com/lirantal/npq ). As one datapoint, look at the download stats for the affected Chalk package for example (…
    comment by pimterry · 2025-09-09 · in You too can run malware from NPM (I mean without consequences)
  4. I have used https://github.com/lirantal/npq for a good while now, but I am yearning for that'd look deeper into the health of the package at hand.
    comment by touristtam · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos
  5. ▲ 1
    Npq: audit JavaScript packages before install
    story by caust1c · 2018-07-13 · 0 comments