Open source / Guard/Tripwire / package-tripwire
package-tripwire
Fail CI when dependency changes look suspicious: new install scripts, publisher/maintainer changes, freshly published versions, typosquats, deprecated packages, integrity
On npm
$ npm install package-tripwire
README rendered from GitHub at build (Shiki) —