lirantal/npq
View on GitHub ↗ ★ 1,795 JavaScript
safely install npm packages by auditing them pre-install stage
5 mentions on Hacker News by 5 people: 1 story, 4 comments · first 2018-07-13 · latest 2025-11-24
20082026
-
…ways but here are few community tools: - https://socket.dev/blog/introducing-socket-firewall - https://github.com/lirantal/npq - https://bun.com/docs/pm/security-scanner-api source: https://github.com/bodadotsh/npm-security-best-practices?t…
comment by tmvnty · 2025-11-24 · in Shai-Hulud Returns: Over 300 NPM Packages Infected -
…More from Liran: GitHub: https://github.com/lirantal NPQ Package Checker: https://github.com/lirantal/npq Snyk Blog: https://snyk.io/blog LinkedIn: https://linkedin.com/in/talliran If you're dealing with supply chain risk, AI code g
comment by neciudan · 2025-11-19 -
…* There's quite a few tools to help mitigate the risk here, like https://socket.dev and npq ( https://github.com/lirantal/npq ). As one datapoint, look at the download stats for the affected Chalk package for example (…
comment by pimterry · 2025-09-09 · in You too can run malware from NPM (I mean without consequences) -
I have used https://github.com/lirantal/npq for a good while now, but I am yearning for that'd look deeper into the health of the package at hand.
comment by touristtam · 2025-03-15 · in Tj-actions/changed-files GitHub Action Compromised – used by over 23K repos