NPM Package Manifest Auditor
Pricing
from $3.00 / 1,000 audited npm packages
NPM Package Manifest Auditor
Audit bounded public npm package manifests for declared license, deprecation, provenance and install-script metadata.
Pricing
from $3.00 / 1,000 audited npm packages
Rating
0.0
(0)
Developer
Guillermo Morán
Maintained by CommunityActor stats
0
Bookmarked
2
Total users
1
Monthly active users
12 days ago
Last modified
Categories
Share
Audit public npm package manifests in batches and export deterministic metadata evidence for dependency review workflows.
For developers, DevOps teams, package reviewers and agents that need a lightweight public-registry check before adding a package to a project.
What it does
- Reads 1–50 public npm package manifests from the npm registry.
- Emits one Dataset row per requested package.
- Returns the latest version, declared license, license-policy status, deprecation metadata, repository declaration and install lifecycle scripts.
- Makes a bounded metadata decision:
METADATA_OKorREVIEW_REQUIRED. - Saves a reconcilable
SUMMARYrecord.
Input
{"packageNames": ["lodash"],"allowedLicenses": ["MIT", "Apache-2.0", "BSD-3-Clause", "ISC"]}
Output
Each row represents one meaningful package-manifest audit. A row includes the public package name, latest version, declared metadata and explainable evidence behind its policy decision.
Important limitations
This Actor audits only declared public npm registry metadata. It does not install packages, scan source code, resolve dependency trees, find vulnerabilities, verify license text, or provide legal advice. Use REVIEW_REQUIRED results as a prompt for human or policy-tool review, not as a security verdict.
Privacy and cost
No login, LLM, browser automation or paid external API is used. The Actor reads only the public npm registry records requested in input.