You can access the NPM Package Risk Auditor programmatically from your own applications by using the Apify API. You can also choose the language preference from below. To use the Apify API, you’ll need an Apify account and your API token, found in Integrations settings in Apify Console.

Python

JavaScript

CLI

OpenAPI

HTTP

MCP

1import { ApifyClient } from 'apify-client';
2
3// Initialize the ApifyClient with your Apify API token
4// Replace the '<YOUR_API_TOKEN>' with your token
5const client = new ApifyClient({
6    token: '<YOUR_API_TOKEN>',
7});
8
9// Prepare Actor input
10const input = {
11    "packages": [
12        "react",
13        "lodash",
14        "@apify/sdk"
15    ]
16};
17
18// Run the Actor and wait for it to finish
19const run = await client.actor("ezzatox/npm-package-risk-auditor").call(input);
20
21// Fetch and print Actor results from the run's dataset (if any)
22console.log('Results from dataset');
23console.log(`💾 Check your data here: https://console.apify.com/storage/datasets/${run.defaultDatasetId}`);
24const { items } = await client.dataset(run.defaultDatasetId).listItems();
25items.forEach((item) => {
26    console.dir(item);
27});
28
29// 📚 Want to learn more 📖? Go to → https://docs.apify.com/api/client/js/docs

NPM Package Risk Auditor API in JavaScript

The Apify API client for JavaScript is the official library that allows you to use NPM Package Risk Auditor API in JavaScript or TypeScript, providing convenience functions and automatic retries on errors.

Install the apify-client

$npm install apify-client

Other API clients include:

NPM Package Risk Auditor API in Python

NPM Package Risk Auditor API through CLI

NPM Package Risk Auditor OpenAPI definition

NPM Package Risk Auditor API

NPM Vulnerability Checker

automation-lab/npm-vulnerability-checker

Check npm packages for known vulnerabilities via OSV.dev API. Input package names with optional versions — get CVE IDs, severity (CRITICAL/HIGH/MEDIUM/LOW), affected ranges, and fix versions. No proxy needed.

Stas Persiianenko

OSS Dependency Risk Report — Bus Factor, CVEs & SBOM Compliance

ryanclinton/oss-dependency-risk-report

Analyze the risk profile of any open-source package or repository by querying 7 data sources in parallel — GitHub repositories, NVD CVE vulnerabilities, CISA Known Exploited Vulnerabilities (KEV), StackExchange discussions, Hacker News mentions, Federal Register SBOM regulations, and Congress...

Ryan Clinton

🛡️ Security Headers Checker

taroyamada/security-headers-checker

Audit HTTP security headers in bulk across hundreds of websites. Extract OWASP compliance grades and detect missing HSTS or CSP directives instantly.

naoki anzai

npm License & Deprecation Checker

taroyamada/npm-package-intelligence

Audit npm libraries for deprecated versions, abandoned repositories, and specific open-source licenses to maintain healthy JavaScript supply chains.

naoki anzai

jsDelivr Package Stats Scraper

parseforge/jsdelivr-package-stats-scraper

Pull jsDelivr CDN delivery stats for npm and GitHub packages. Returns hits, bandwidth and prior-period values, ranked across day, week, month or year so you can track real-world adoption of any package.

ParseForge

npm Package Insights

kremkov-stanislav/npm-package-insights

Bulk supply-chain analytics for npm packages: downloads, version cadence, dependencies, license, OSV vulnerabilities, npms.io Quality/Popularity/Maintenance scores, and a transparent Risk Score 0-100.

Kremkov Stanislav

npm Package Health Score API — Dependency Risk Scorer

malonestar/npm-package-health-scorer

npm package health score API. Rate any npm dependency 0-100 with a letter grade from keyless public signals: downloads, release recency & cadence, maintainers, license, deprecation, deps. One row per package with top risks. Keyless. A clean MCP tool for AI coding agents.

Kyle Maloney

npm Package & Dependency Scraper

taroyamada/npm-package-dependency-intelligence

Analyze npm package metadata, versions, dependencies, maintainer hints, release cadence, and package risk signals using the official npm registry API.

naoki anzai

Developer Signal Monitor

silicon1235/developer-signal-monitor

Monitor public npm packages, maintainers, package license changes, GitHub releases, OSV/SBOM advisories, and Docker tags for developer signals.

X L

OSS Supply Chain Risk Report - PyPI, npm, OSV and Docker Hub

changeable_peddler/oss-supply-chain-risk-report

Audit Python packages, npm packages, Docker images, lockfiles, SBOMs, and Dockerfiles for vulnerability, maintenance, freshness, popularity, and metadata risk signals.

Sean J

NPM Package Scraper | Downloads, Dependencies & Versions

resounding_diplomacy/npm-trending-scraper

Scrape NPM package statistics including weekly downloads, dependencies, versions, maintainers, and license info. Search packages by keyword or track trending packages. Monitor package health and adoption metrics. Export as JSON or CSV, run via API, or schedule automated dependency tracking.