zebbern/depfence
Detect dependency confusion attack vectors in Node.js projects
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| severity | Minimum severity threshold (critical, high, medium, low, info) | no | high |
| online | Check package names against public npm registry | no | false |
| workspace | Scan all workspace packages in monorepo | no | false |
| scopes | Space-separated scopes to check (e.g., @company @internal) | no | "" |
| ignore | Space-separated packages to ignore | no | "" |
| fail-on | Fail if findings at this severity or above (critical, high, medium, low, none) | no | high |
Outputs
| name | description |
|---|---|
| findings | Total number of findings |
| critical | Number of critical findings |
| high | Number of high findings |
| result-json | Full scan result as JSON |