deps/npm

Free catalog · v0.0.22

Reviews npm projects for dangerous lifecycle scripts, auto-update cooldowns, and lockfile integrity.

Sign in

Authenticate so pulls are attributed to your account. Free catalog packages do not require a paid plan.

$doomer login

Pull

Install this adversary into your local store. Use a version pin when you need a reproducible CI install.

$doomer pull deps/npm
$doomer pull deps/npm:0.0.22

Run

Review a repository or a change range. Point --path at the project root.

$doomer run deps/npm --path .
$doomer run deps/npm --path . --base main --head HEAD

Auto-select

Let the CLI pick catalog adversaries that match the changed files (includes this one when Go/sources match its triggers).

$adversary auto --path . --base main --head HEAD

Inspect what you have

Confirm the installed version and package identity on this machine.

$doomer list
$doomer search deps/npm

Need the CLI first? See CLI docs.

More from the registry