lirantal/npq

Health v2 · maintenance only

Adoption not part of the score

1789 stars · 43 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

npq is a command-line tool that audits npm packages for security risks before installing them, checking CVE databases and applying syntactic heuristics. It acts as a safer drop-in wrapper around npm/yarn install commands.

Use cases

• safely install npm packages
• check a package for known vulnerabilities before install
• avoid installing malicious or suspicious npm modules
• audit package age and download popularity pre-install
• protect node.js projects from supply chain attacks

When to choose

• you install npm packages manually and want a security gate
• you want pre-install checks against CVE databases like snyk.io
• you need a lightweight CLI wrapper for safer npm/yarn installs

When to avoid

• you need continuous dependency monitoring in CI rather than install-time checks
• your project uses package managers outside the npm/yarn ecosystem
• you require fully automated policy enforcement across a large organization

Facets

cli-tool · maturity active

security vulnerability-scanning package-manager cli dependency-audit security developer-tools cli cross-platform npm supply-chain-security pre-install-audit appsec snyk command-line javascript nodejs

Member repositories

For agents

markdown · JSON · MCP: product_card(name="lirantal/npq")