erayaha/Slop Scan
Github Action and npx tool that flags hallucinated and suspicious packages as slopsquatting targets.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| directory | Directory to scan (default: repository root) | no | . |
| threshold | Weekly download count below which an existing package is flagged as suspicious (default: 500) | no | 500 |
| fail-on-suspicious | Exit with a non-zero code when suspicious or not-found packages are detected. Set to "false" to report issues without failing the workflow. | no | true |
Outputs
no outputs