Cybersecurity
Supply Chain Risk Auditor
Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution. Use when asked to audit dependencies, assess supply-chain or third-party package risk, or review a dependency tree before an engagement.
- Publisher / source
- trailofbits/skills (found on skills.sh, an awesome list, the CSV list)
- Upstream record
- trailofbits/skills
- Version
- Version 3
- Published
- Publication review
- Approved for publication
- Content fingerprint
a1254b7f8d3a1731a9a7e1f9cd6c67b59cf84ed6ef7c7fb455db9a14c528ceb4