UNPKG

@dreamhorizonorg/sentinel

Version:

Open-source, zero-dependency tool that blocks compromised packages BEFORE download. Built to counter supply chain and credential theft attacks like Shai-Hulud.

72 lines (71 loc) 2.13 kB
{ "name": "@dreamhorizonorg/sentinel", "version": "1.0.0", "description": "Open-source, zero-dependency tool that blocks compromised packages BEFORE download. Built to counter supply chain and credential theft attacks like Shai-Hulud.", "type": "module", "main": "lib/scanner.mjs", "bin": { "sentinel": "bin/cli.mjs" }, "scripts": { "test": "./sample-test-repo/tests/test.sh", "test:docker": "./sample-test-repo/tests/test.sh --docker", "test:docker:npm": "./sample-test-repo/tests/test.sh --docker --npm", "test:smoke": "node bin/cli.mjs --version && node bin/cli.mjs --help && node bin/cli.mjs scan lodash@4.17.21 --skipNpmAudit=true --enableOsv=false --enableGitHub=false --logMode=quiet && node bin/cli.mjs list --logMode=quiet", "test:quick": "node bin/cli.mjs --version && node bin/cli.mjs --help && node bin/cli.mjs scan lodash@4.17.21 --skipNpmAudit=true --enableOsv=false --enableGitHub=false --logMode=quiet", "scan": "node bin/cli.mjs scan", "security-check": "node bin/cli.mjs scan", "list": "node bin/cli.mjs list" }, "keywords": [ "security", "npm", "yarn", "pnpm", "bun", "package", "validation", "vulnerability", "audit", "scanner", "package-security", "vulnerability-scanner", "supply-chain-attack", "supply-chain-security", "malicious-packages", "compromised-packages", "credential-theft", "pre-install", "zero-dependencies", "npm-audit", "npm-security", "osv", "github-advisories", "dependency-security", "package-validation", "package-manager", "shai-hulud", "npm-worm", "worm", "worm-detection", "malware-protection", "backdoor", "malware" ], "author": "DS Horizon", "license": "MIT", "repository": { "type": "git", "url": "https://github.com/ds-horizon/sentinel.git" }, "bugs": { "url": "https://github.com/ds-horizon/sentinel/issues" }, "homepage": "https://github.com/ds-horizon/sentinel#readme", "engines": { "node": ">=18.0.0" }, "publishConfig": { "access": "public" } }