NPMScan

npm packages and vulnerabilities

Machines look up npm packages, known vulnerabilities and CVEs, and flag risky install scripts. No account needed.

Already on WeMachines? Plugins → NPMScan.

  • Find npm packages for parsing CSV files
  • Is minimist 1.2.5 safe, or do I need to upgrade?
  • Audit my package.json for risky dependencies

How it works

NPMScan reads public information. An admin can add it without connecting an account.

Developer
SHYNGGYS SHYNBOLATOV
Category
Security
How it connects
No account needed
Machines can
Read
Website
npmscan.com