Npm Safety

Comprehensive npm package safety report combining npm registry metadata, the OSV vulnerability database, npms.io quality scores, and GitHub repo health. Returns a risk summary (low, medium, high, or critical), a CVE breakdown by severity, maintainer info, dependency counts, last-commit recency, and archival status. Use with a package name such as react, optionally with a version. Built for AI code-review agents and supply-chain auditors.

Ready-to-deploy endpoint, delivered as ready-to-run Node.js source. Uses only free services: the npm registry, OSV, and npms.io need no API key. GitHub lookups work unauthenticated out of the box; setting an optional GITHUB_TOKEN environment variable simply raises the GitHub API rate limit, it is not required to run.