Skip to content
#

lockfile-analysis

Star

Here are 2 public repositories matching this topic...

Language: All
Filter by language
All 2 Python 1 TypeScript 1

GandalFran / dephook

Star 0

A lightweight CLI focused on security & visibility of dependencies, inspecting Node.js projects for install/prepare hooks and binaries. Find out what dependencies are running scripts during install, why they are present, and what binaries they expose.

dependency-security supply-chain-security package-audit lockfile-analysis dependency-visibility transitive-dependency-analysis install-script-detection dependency-traceability
  • Updated Mar 5, 2026
  • TypeScript

krsnaSuraj / npm-shield

Star 0

Shai-Hulud/ChainDrop npm worm scanner — 220 tests, zero deps, cross-platform. Detects 416 poisoned packages: lockfile analysis, SHA-256 hashes, content markers, credential audit, persistence. ReDoS-safe, thread-safe, SARIF output. Production-ready supply-chain defense.

python incident-response cybersecurity security-tools cli-tool vulnerability-scanner dependency-scanning supply-chain-security npm-security shai-hulud npm-worm lockfile-analysis chaindrop npm-alias pnpm-security
  • Updated Aug 8, 2026
  • Python

Improve this page

Add a description, image, and links to the lockfile-analysis topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the lockfile-analysis topic, visit your repo's landing page and select "manage topics."

Learn more