depguard_audit
Deep security audit of a single npm package: scan for malware, check vulnerabilities, analyze install scripts, verify license, and ensure compatibility. Use for full details on a specific package.
Instructions
Deep security audit of a single npm package. Downloads the tarball, scans source code for malware, checks vulnerabilities (npm + GitHub Advisory), analyzes install scripts, verifies license. Use when you need full details on a specific package. Pass a version to audit a specific installed version instead of latest.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | npm package name | |
| version | No | Specific version to audit (e.g. "4.17.1"). If omitted, audits the latest version. | |
| targetLicense | No | Project license for compatibility check (default: MIT) |