@dreamhorizonorg/sentinel
Version:
Open-source, zero-dependency tool that blocks compromised packages BEFORE download. Built to counter supply chain and credential theft attacks like Shai-Hulud.
72 lines (71 loc) • 2.13 kB
JSON
{
"name": "@dreamhorizonorg/sentinel",
"version": "1.0.0",
"description": "Open-source, zero-dependency tool that blocks compromised packages BEFORE download. Built to counter supply chain and credential theft attacks like Shai-Hulud.",
"type": "module",
"main": "lib/scanner.mjs",
"bin": {
"sentinel": "bin/cli.mjs"
},
"scripts": {
"test": "./sample-test-repo/tests/test.sh",
"test:docker": "./sample-test-repo/tests/test.sh --docker",
"test:docker:npm": "./sample-test-repo/tests/test.sh --docker --npm",
"test:smoke": "node bin/cli.mjs --version && node bin/cli.mjs --help && node bin/cli.mjs scan lodash@4.17.21 --skipNpmAudit=true --enableOsv=false --enableGitHub=false --logMode=quiet && node bin/cli.mjs list --logMode=quiet",
"test:quick": "node bin/cli.mjs --version && node bin/cli.mjs --help && node bin/cli.mjs scan lodash@4.17.21 --skipNpmAudit=true --enableOsv=false --enableGitHub=false --logMode=quiet",
"scan": "node bin/cli.mjs scan",
"security-check": "node bin/cli.mjs scan",
"list": "node bin/cli.mjs list"
},
"keywords": [
"security",
"npm",
"yarn",
"pnpm",
"bun",
"package",
"validation",
"vulnerability",
"audit",
"scanner",
"package-security",
"vulnerability-scanner",
"supply-chain-attack",
"supply-chain-security",
"malicious-packages",
"compromised-packages",
"credential-theft",
"pre-install",
"zero-dependencies",
"npm-audit",
"npm-security",
"osv",
"github-advisories",
"dependency-security",
"package-validation",
"package-manager",
"shai-hulud",
"npm-worm",
"worm",
"worm-detection",
"malware-protection",
"backdoor",
"malware"
],
"author": "DS Horizon",
"license": "MIT",
"repository": {
"type": "git",
"url": "https://github.com/ds-horizon/sentinel.git"
},
"bugs": {
"url": "https://github.com/ds-horizon/sentinel/issues"
},
"homepage": "https://github.com/ds-horizon/sentinel#readme",
"engines": {
"node": ">=18.0.0"
},
"publishConfig": {
"access": "public"
}
}