Supply-chain defense
lockcheck ↗
A zero-dependency Node.js CLI that reviews lockfile changes for suspicious dependency patterns.
The thinking behind it +
Typosquats, registry anomalies, integrity changes and install scripts, surfaced before they reach production.