NPM Package Risk Auditor

NPM Vulnerability Checker

automation-lab/npm-vulnerability-checker

Check npm packages for known vulnerabilities via OSV.dev API. Input package names with optional versions — get CVE IDs, severity (CRITICAL/HIGH/MEDIUM/LOW), affected ranges, and fix versions. No proxy needed.

Analyze the risk profile of any open-source package or repository by querying 7 data sources in parallel — GitHub repositories, NVD CVE vulnerabilities, CISA Known Exploited Vulnerabilities (KEV), StackExchange discussions, Hacker News mentions, Federal Register SBOM regulations, and Congress...

🛡️ Security Headers Checker

taroyamada/security-headers-checker

Audit HTTP security headers in bulk across hundreds of websites. Extract OWASP compliance grades and detect missing HSTS or CSP directives instantly.

npm License & Deprecation Checker

taroyamada/npm-package-intelligence

Audit npm libraries for deprecated versions, abandoned repositories, and specific open-source licenses to maintain healthy JavaScript supply chains.

jsDelivr Package Stats Scraper

parseforge/jsdelivr-package-stats-scraper

Pull jsDelivr CDN delivery stats for npm and GitHub packages. Returns hits, bandwidth and prior-period values, ranked across day, week, month or year so you can track real-world adoption of any package.

Bulk supply-chain analytics for npm packages: downloads, version cadence, dependencies, license, OSV vulnerabilities, npms.io Quality/Popularity/Maintenance scores, and a transparent Risk Score 0-100.

npm package health score API. Rate any npm dependency 0-100 with a letter grade from keyless public signals: downloads, release recency & cadence, maintainers, license, deprecation, deps. One row per package with top risks. Keyless. A clean MCP tool for AI coding agents.

npm Package & Dependency Scraper

taroyamada/npm-package-dependency-intelligence

Analyze npm package metadata, versions, dependencies, maintainer hints, release cadence, and package risk signals using the official npm registry API.

Monitor public npm packages, maintainers, package license changes, GitHub releases, OSV/SBOM advisories, and Docker tags for developer signals.

Audit Python packages, npm packages, Docker images, lockfiles, SBOMs, and Dockerfiles for vulnerability, maintenance, freshness, popularity, and metadata risk signals.

Scrape NPM package statistics including weekly downloads, dependencies, versions, maintainers, and license info. Search packages by keyword or track trending packages. Monitor package health and adoption metrics. Export as JSON or CSV, run via API, or schedule automated dependency tracking.