Pricing

from $1.00 / 1,000 package audits

Go to Apify Store

NPM Package Risk Auditor

Try for free

Audit public npm packages for maintenance, deprecation, download, license, dependency, and supply-chain risk signals.

Pricing

from $1.00 / 1,000 package audits

Rating

0.0

(0)

Developer

Ezzat Ghazi

Actor stats

Bookmarked

Total users

Monthly active users

3 days ago

Last modified

What it checks

Deprecation status
Weekly npm downloads
License presence
Direct dependency count
Maintainer count
Package age / last modified date
Repository and npm links
Human-readable risk reasons and a 0-100 score

Input example

{
  "packages": ["react", "lodash", "@apify/sdk"],
  "includeDependencies": false,
  "maxDependencies": 25
}

Use cases

Dependency due diligence before installing packages
Supply-chain review for agencies and SaaS teams
Vendor/dependency scorecards
Bulk npm package health checks

Notes

This Actor uses public npm registry and npm download APIs only. Scores are heuristic risk signals, not a replacement for a full security audit.

NPM Vulnerability Checker

automation-lab/npm-vulnerability-checker

Check npm packages for known vulnerabilities via OSV.dev API. Input package names with optional versions — get CVE IDs, severity (CRITICAL/HIGH/MEDIUM/LOW), affected ranges, and fix versions. No proxy needed.

Stas Persiianenko

OSS Dependency Risk Report — Bus Factor, CVEs & SBOM Compliance

ryanclinton/oss-dependency-risk-report

Analyze the risk profile of any open-source package or repository by querying 7 data sources in parallel — GitHub repositories, NVD CVE vulnerabilities, CISA Known Exploited Vulnerabilities (KEV), StackExchange discussions, Hacker News mentions, Federal Register SBOM regulations, and Congress...

Ryan Clinton

🛡️ Security Headers Checker

taroyamada/security-headers-checker

Audit HTTP security headers in bulk across hundreds of websites. Extract OWASP compliance grades and detect missing HSTS or CSP directives instantly.

naoki anzai

npm License & Deprecation Checker

taroyamada/npm-package-intelligence

Audit npm libraries for deprecated versions, abandoned repositories, and specific open-source licenses to maintain healthy JavaScript supply chains.

naoki anzai

jsDelivr Package Stats Scraper

parseforge/jsdelivr-package-stats-scraper

Pull jsDelivr CDN delivery stats for npm and GitHub packages. Returns hits, bandwidth and prior-period values, ranked across day, week, month or year so you can track real-world adoption of any package.

ParseForge

npm Package Insights

kremkov-stanislav/npm-package-insights

Bulk supply-chain analytics for npm packages: downloads, version cadence, dependencies, license, OSV vulnerabilities, npms.io Quality/Popularity/Maintenance scores, and a transparent Risk Score 0-100.

Kremkov Stanislav

npm Package Health Score API — Dependency Risk Scorer

malonestar/npm-package-health-scorer

npm package health score API. Rate any npm dependency 0-100 with a letter grade from keyless public signals: downloads, release recency & cadence, maintainers, license, deprecation, deps. One row per package with top risks. Keyless. A clean MCP tool for AI coding agents.

Kyle Maloney

npm Package & Dependency Scraper

taroyamada/npm-package-dependency-intelligence

Analyze npm package metadata, versions, dependencies, maintainer hints, release cadence, and package risk signals using the official npm registry API.

naoki anzai

Developer Signal Monitor

silicon1235/developer-signal-monitor

Monitor public npm packages, maintainers, package license changes, GitHub releases, OSV/SBOM advisories, and Docker tags for developer signals.

X L

OSS Supply Chain Risk Report - PyPI, npm, OSV and Docker Hub

changeable_peddler/oss-supply-chain-risk-report

Audit Python packages, npm packages, Docker images, lockfiles, SBOMs, and Dockerfiles for vulnerability, maintenance, freshness, popularity, and metadata risk signals.

Sean J

NPM Package Scraper | Downloads, Dependencies & Versions

resounding_diplomacy/npm-trending-scraper

Scrape NPM package statistics including weekly downloads, dependencies, versions, maintainers, and license info. Search packages by keyword or track trending packages. Monitor package health and adoption metrics. Export as JSON or CSV, run via API, or schedule automated dependency tracking.