Verify every reachable bare import in a package's released artifact is declared and resolvable

Industry-standard, free NPM package for JavaScript/Node.js dependency security, health, and optimization analysis.

Elyra extension for project health analysis -- dependency audit, security checks, code quality, and more

MCP server for npm/pnpm/yarn — structured dependency, audit, and script data for AI agents

Polyglot dependency audit gate CLI

Security audit skill for Bluetemberg — dependency audit, secrets scan, OWASP patterns.

依赖安全审计：扫描项目依赖的已知漏洞（OSV.dev）并检测过期依赖（npm registry），返回漏洞严重级/修复版本与升级幅度

A security dependency audit tool for local and remote projects

Simple, pluggable, zero-dependency, GraphQL over HTTP spec compliant server, client and audit suite.

Generate an HTML report for CODEOWNERS ownership gaps and run in CI or from the CLI to fail when files are not covered.

Given a response from the npm security api, render it into a variety of security reports

Unified Solidity security scanner — static analysis, dependency audit, live threat intel, exploit simulation, and watch-mode monitoring

Haldir auditor — dependency audit for agent skills (Layer 2)

The most comprehensive Angular security auditing tool. 150+ rules, 10 scan types (OWASP, API security, performance, accessibility, dependency audit, hacking, complexity, code quality). Auto-fix suggestions, HTML dashboard, SVG badge generation, SARIF expo

<h5 align="center"> Run <a href="https://developers.google.com/web/tools/lighthouse">Lighthouse</a> and <a href="https://github.com/pa11y/pa11y">Pa11y</a> audits directly in <a href="https://cypress.io/">Cypress</a> test suites </h5>

Audits NPM, Yarn, and PNPM projects in CI environments

MCP server that lets a coding agent see how stale, deprecated, or risky a project's npm dependencies are — feed it a package.json and get a per-dependency freshness, deprecation, and license report.

Verdaccio Middleware plugin to bypass npmjs audit

Security & License Compliance For Your App's Dependencies 🪱

Reshape into a better npm audit for the community and encourage more people to include security audit into their process.