cryptostrapon

cryptostrapon/npm-install-audit

Zero dependency Node script that flags install hooks and risky code in a repo before you run npm install. For take-home tests and unknown projects.

0 stars 1 forks 0 watchers JavaScript MIT License
cli developer-security developer-tools devsecops javascript malware-detection nodejs npm scam-prevention security supply-chain-security
View on GitHub Website
7 Open Issues Need Help Last updated: Oct 22, 2026

Open Issues Need Help

View All on GitHub
Flag prepublish scripts and binding.gyp builds 7 days ago
good first issue
cryptostrapon/npm-install-audit
0

Zero dependency Node script that flags install hooks and risky code in a repo before you run npm install. For take-home tests and unknown projects.

JavaScript
#cli#developer-security#developer-tools#devsecops#javascript#malware-detection#nodejs#npm#scam-prevention#security#supply-chain-security
Add an opt-in summary to --json output 11 days ago
good first issue
cryptostrapon/npm-install-audit
0

Zero dependency Node script that flags install hooks and risky code in a repo before you run npm install. For take-home tests and unknown projects.

JavaScript
#cli#developer-security#developer-tools#devsecops#javascript#malware-detection#nodejs#npm#scam-prevention#security#supply-chain-security
Check .npmrc for risky settings 11 days ago
good first issue
cryptostrapon/npm-install-audit
0

Zero dependency Node script that flags install hooks and risky code in a repo before you run npm install. For take-home tests and unknown projects.

JavaScript
#cli#developer-security#developer-tools#devsecops#javascript#malware-detection#nodejs#npm#scam-prevention#security#supply-chain-security
Flag non-registry "resolved" URLs in package-lock.json 11 days ago
good first issue
cryptostrapon/npm-install-audit
0

Zero dependency Node script that flags install hooks and risky code in a repo before you run npm install. For take-home tests and unknown projects.

JavaScript
#cli#developer-security#developer-tools#devsecops#javascript#malware-detection#nodejs#npm#scam-prevention#security#supply-chain-security
Flag dependencies installed from git URLs or tarballs 13 days ago
good first issue
cryptostrapon/npm-install-audit
0

Zero dependency Node script that flags install hooks and risky code in a repo before you run npm install. For take-home tests and unknown projects.

JavaScript
#cli#developer-security#developer-tools#devsecops#javascript#malware-detection#nodejs#npm#scam-prevention#security#supply-chain-security
Scan TypeScript files (.ts, .mts, .cts) 13 days ago
good first issue
cryptostrapon/npm-install-audit
0

Zero dependency Node script that flags install hooks and risky code in a repo before you run npm install. For take-home tests and unknown projects.

JavaScript
#cli#developer-security#developer-tools#devsecops#javascript#malware-detection#nodejs#npm#scam-prevention#security#supply-chain-security
Add a --json output flag 13 days ago
good first issue
cryptostrapon/npm-install-audit
0

Zero dependency Node script that flags install hooks and risky code in a repo before you run npm install. For take-home tests and unknown projects.

JavaScript
#cli#developer-security#developer-tools#devsecops#javascript#malware-detection#nodejs#npm#scam-prevention#security#supply-chain-security