package-tripwire

flag risky dependency changes

Detect suspicious or risky changes in npm dependencies before they merge.

• 369/week
• 1★
• MIT
• v1.1.0
• In use on this site
• Supply Chain

Read the full README on GitHub (opens in a new tab)View on npm (opens in a new tab)

• supply-chain-sentinel

  one supply-chain gate

• license-sentinel

  enforce licence policy

• workflow-sentinel

  pin GitHub Actions by SHA