roman-pinchuk/Dependency Security Matrix

Generate a README dependency matrix with optional scanner-backed security status.

Trust Signals

name	description	required	default
scanner	Security scanner report format. Currently supports snyk.	no	snyk
scanner-report	Path to the scanner JSON report. If missing or invalid, fallback mode can generate a table without security status.	no	""
scanner-report-required	Fail when scanner-report is missing or invalid.	no	false
fallback-without-scanner	Generate dependency inventory when scanner data is unavailable.	no	true
manifest	Path to dependency manifest.	no	package.json
manifest-type	Manifest ecosystem type. Currently supports npm.	no	npm
readme	Markdown file to update.	no	README.md
start-marker	Marker that starts the generated table region.	no	<!-- START_MATRIX_TABLE -->
end-marker	Marker that ends the generated table region.	no	<!-- END_MATRIX_TABLE -->
include-dependencies	Include production dependencies from the manifest.	no	true
include-dev-dependencies	Include development dependencies from the manifest.	no	true
include-latest-version	Fetch latest package versions from the package registry.	no	true
include-status-note	Include a note when scanner data is unavailable.	no	true
heading	Markdown heading for the generated matrix.	no	## Dynamic Dependency & Security Matrix
fail-on-missing-markers	Fail when readme markers are missing.	no	true

name	description
updated	Whether the markdown file changed.
dependency-count	Number of dependencies rendered.
latest-version-count	Number of latest versions resolved.
scanner-used	Scanner adapter used for parsing security findings.
security-status-available	Whether security status was included in the generated table.
issue-count	Total number of scanner findings included.