supply-chain-risk-auditor

【开发与工程】Audits a project's dependencies for supply-chain risk: version-matched advisories for direct dependencies and the full lockfile tree, abandoned or archived upstreams, npm publisher concentration, and install-time script execution. Use when asked to audit dependencies, assess supply-chain or third-party package risk, or review a dependency tree before…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准