mattschaller/npm-provenance-checker
Batch-verify npm provenance attestations across your project lockfile
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| lockfile | Path to lockfile (auto-detected if omitted) | no | "" |
| format | Output format: text, json, html | no | text |
| threshold | Minimum provenance score (0-100). Fails if below. | no | 0 |
| prod-only | Only check production dependencies | no | false |
| concurrency | Max concurrent registry checks | no | 20 |
Outputs
no outputs