NPM Package Vulnerability Scanner

Scans npm dependencies for known vulnerabilities using the npm audit JSON API and the OSV.dev REST API (api.osv.dev/v1/query). Cross-references findings with the GitHub Advisory Database (GHSA) for severity scoring.

Installation

Use the upstream install or setup path that matches your environment:

• npm-audit | npm Docs Skip to search Skip to content
• npm Docs
• npm package scope, access level, and visibility
• Docker and private modules

Requirements and caveats from upstream:

• Downloading and installing Node.js and npm
• Try the latest stable version of node
• Creating Node.js modules