Resources
npm-security-best-practices
lirantal/npm-security-best-practices
A curated list of npm security best practices covering supply-chain hardening, lockfile integrity, and safer package installs, with copy-paste configurations for npm and pnpm.
Topics
Related projects
nodejs-cli-apps-best-practices4.1kThis repository is a curated guide to Node.js CLI best practices, covering command-line experience, distribution, interoperability, errors, security, and versioning.
awesome-ai-security-tools1.7kCurated directory of public, research, and commercial tools for AI security and AI-assisted cybersecurity, spanning audits, red-teaming, fuzzing, threat intelligence, and SOC triage.- is-website-vulnerable2kis-website-vulnerable is a Node.js CLI that inspects a website's frontend JavaScript libraries and reports publicly known vulnerabilities, usable locally or in CI pipelines.
- npq1.8kA CLI that audits npm packages before installation, checking vulnerabilities, age, popularity, install scripts and provenance to reduce supply-chain risk.
vet1.1kSafeDep vet scans dependencies, GitHub Actions workflows, and AI agent configs for malicious packages, vulnerabilities, and risky patterns. It is a policy-as-code security CLI for supply-chain protection.
awesome-mac117.8kA curated awesome-list of macOS software organized by category for discovering editors, dev tools, design and media apps.