maxh33/PhantomRaven NPM Scanner
Detect PhantomRaven RDD vulnerabilities, typosquatting, and hidden dependencies in npm projects
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| path | Directory to scan (default: repository root) | no | . |
| fail-on-critical | Exit with error code 1 if critical issues found | no | true |
| fail-on-high | Exit with error code 1 if high or critical issues found | no | false |
| trusted-domains | Comma-separated list of trusted domains (e.g., "nexus.corp.com,artifactory.internal") | no | "" |
| output-file | Path to save JSON report | no | phantom-raven-report.json |
| include-node-modules | Scan inside node_modules (slow) | no | false |
Outputs
| name | description |
|---|---|
| issues-found | Number of issues found |
| critical-count | Number of critical issues |
| high-count | Number of high severity issues |
| report-path | Path to the JSON report |