# Check n8n community nodes for supply chain risk

**Use case:** 

List every community node a workflow depends on and what is known about the package behind it: whether n8n has verified it, how recently it was published, and whether npm carries build provenance. A community node runs with the same access as a built-in one, and installing a workflow that references an abandoned or unverified package is a supply chain decision most people make without noticing.

## Input

```json
{
  "workflowJson": {
    "name": "Document pipeline with community nodes",
    "nodes": [
      {
        "id": "1",
        "name": "Every hour",
        "type": "n8n-nodes-base.scheduleTrigger",
        "typeVersion": 1.2,
        "position": [
          0,
          0
        ],
        "parameters": {
          "rule": {
            "interval": [
              {
                "field": "hours",
                "hoursInterval": 1
              }
            ]
          }
        }
      },
      {
        "id": "2",
        "name": "Read PDF",
        "type": "n8n-nodes-puppeteer.puppeteer",
        "typeVersion": 1,
        "position": [
          220,
          0
        ],
        "parameters": {
          "url": "https://reports.internal/latest",
          "operation": "getPageContent"
        }
      },
      {
        "id": "3",
        "name": "Convert with Chatwoot",
        "type": "n8n-nodes-chatwoot.chatwoot",
        "typeVersion": 1,
        "position": [
          440,
          0
        ],
        "parameters": {
          "resource": "conversation",
          "operation": "create"
        }
      },
      {
        "id": "4",
        "name": "Store in Baserow",
        "type": "n8n-nodes-base.baserow",
        "typeVersion": 1,
        "position": [
          660,
          0
        ],
        "parameters": {
          "operation": "create",
          "tableId": 12
        },
        "credentials": {
          "baserowApi": {
            "id": "3",
            "name": "Baserow account"
          }
        }
      },
      {
        "id": "5",
        "name": "Notify",
        "type": "n8n-nodes-base.slack",
        "typeVersion": 2.2,
        "position": [
          880,
          0
        ],
        "parameters": {
          "channel": "#docs",
          "text": "Pipeline complete"
        },
        "credentials": {
          "slackApi": {
            "id": "4",
            "name": "Slack account"
          }
        }
      }
    ],
    "connections": {
      "Every hour": {
        "main": [
          [
            {
              "node": "Read PDF",
              "type": "main",
              "index": 0
            }
          ]
        ]
      },
      "Read PDF": {
        "main": [
          [
            {
              "node": "Convert with Chatwoot",
              "type": "main",
              "index": 0
            }
          ]
        ]
      },
      "Convert with Chatwoot": {
        "main": [
          [
            {
              "node": "Store in Baserow",
              "type": "main",
              "index": 0
            }
          ]
        ]
      },
      "Store in Baserow": {
        "main": [
          [
            {
              "node": "Notify",
              "type": "main",
              "index": 0
            }
          ]
        ]
      }
    },
    "settings": {
      "errorWorkflow": "err-1"
    }
  },
  "workflowUrls": [],
  "workflowIds": [],
  "activeOnly": false,
  "ruleSet": "maintainability",
  "minSeverity": "low",
  "ignoreRules": [],
  "includeReport": false
}
```

## Output

```json
{
  "severity": {
    "label": "Severity",
    "format": "string"
  },
  "rule": {
    "label": "Rule ID",
    "format": "string"
  },
  "ruleTitle": {
    "label": "Rule",
    "format": "string"
  },
  "category": {
    "label": "Category",
    "format": "string"
  },
  "workflowName": {
    "label": "Workflow",
    "format": "string"
  },
  "nodeName": {
    "label": "Node",
    "format": "string"
  },
  "nodeType": {
    "label": "Node type",
    "format": "string"
  },
  "message": {
    "label": "Finding",
    "format": "string"
  },
  "parameterPath": {
    "label": "Parameter",
    "format": "string"
  },
  "evidence": {
    "label": "Evidence (masked)",
    "format": "string"
  },
  "remediation": {
    "label": "How to fix",
    "format": "string"
  },
  "docsUrl": {
    "label": "Docs",
    "format": "string"
  }
}
```

## About this Actor

This example demonstrates how to use [n8n Workflow Auditor - Linter & Security Review](https://apify.com/mediocre_interest/n8n-workflow-auditor.md) with a specific input configuration. Visit the [Actor detail page](https://apify.com/mediocre_interest/n8n-workflow-auditor.md) to learn more, explore other use cases, and run it yourself.


## How to integrate an Actor?

If asked about integration, you help developers integrate Actors into their projects.
You adapt to their stack and deliver integrations that are safe, well-documented, and production-ready.
This Task's input is already configured above — use it as-is rather than inventing a new one.

- **AI agents and MCP clients** — the [Apify MCP server](https://docs.apify.com/integrations/mcp.md) at `https://mcp.apify.com` (remote, streamable HTTP, OAuth on first use).
- **Agentic workflows and local Actor development** — [Agent Skills](https://apify.com/.well-known/agent-skills/index.json) with the [Apify CLI](https://docs.apify.com/cli/docs.md): `npm install -g apify-cli`, then `apify login`.
- **JavaScript/TypeScript projects** — the official [JS/TS client](https://docs.apify.com/api/client/js/docs.md): `npm install apify-client`.
- **Python projects** — the official [Python client](https://docs.apify.com/api/client/python/docs.md): `pip install apify-client`.
- **Any other language** — the [REST API](https://docs.apify.com/api/v2.md).

For full API examples (JavaScript, Python, CLI, MCP, OpenAPI), see this Task's Actor page: https://apify.com/mediocre_interest/n8n-workflow-auditor.md

For more details, see Apify documentation as [Markdown index](https://docs.apify.com/llms.txt) and [Markdown full-text](https://docs.apify.com/llms-full.txt).