Verified record · from the answer index
supply-chain-risk-auditor
skilltested · static-verifiedscore 56/100signed passport ✓7,792 uses
Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution. Use when
Declared tools (1)
supply-chain-risk-auditor
skill:trailofbits/skills/supply-chain-risk-auditor · published by trailofbits · source repository