gahrcoder/depshield
Scan npm dependencies for supply chain attacks including typosquatting, obfuscation, and dependency confusion
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Path to project directory to scan | no | . |
| severity | Minimum severity to report (low, medium, high, critical) | no | medium |
| format | Output format (text, json, sarif) | no | sarif |
| fail-on | Fail the action if findings >= this severity (low, medium, high, critical) | no | high |
Outputs
| name | description |
|---|---|
| findings-count | Total number of findings |
| sarif-file | Path to SARIF output file |