NPM Package Manifest Auditor avatar

NPM Package Manifest Auditor

Pricing

from $3.00 / 1,000 audited npm packages

Go to Apify Store
NPM Package Manifest Auditor

NPM Package Manifest Auditor

Audit bounded public npm package manifests for declared license, deprecation, provenance and install-script metadata.

Pricing

from $3.00 / 1,000 audited npm packages

Rating

0.0

(0)

Developer

Guillermo Morán

Guillermo Morán

Maintained by Community

Actor stats

0

Bookmarked

2

Total users

1

Monthly active users

12 days ago

Last modified

Categories

Share

Audit public npm package manifests in batches and export deterministic metadata evidence for dependency review workflows.

For developers, DevOps teams, package reviewers and agents that need a lightweight public-registry check before adding a package to a project.

What it does

  • Reads 1–50 public npm package manifests from the npm registry.
  • Emits one Dataset row per requested package.
  • Returns the latest version, declared license, license-policy status, deprecation metadata, repository declaration and install lifecycle scripts.
  • Makes a bounded metadata decision: METADATA_OK or REVIEW_REQUIRED.
  • Saves a reconcilable SUMMARY record.

Input

{
"packageNames": ["lodash"],
"allowedLicenses": ["MIT", "Apache-2.0", "BSD-3-Clause", "ISC"]
}

Output

Each row represents one meaningful package-manifest audit. A row includes the public package name, latest version, declared metadata and explainable evidence behind its policy decision.

Important limitations

This Actor audits only declared public npm registry metadata. It does not install packages, scan source code, resolve dependency trees, find vulnerabilities, verify license text, or provide legal advice. Use REVIEW_REQUIRED results as a prompt for human or policy-tool review, not as a security verdict.

Privacy and cost

No login, LLM, browser automation or paid external API is used. The Actor reads only the public npm registry records requested in input.