NPM Package Scanner

Use this skill when you need to inspect the npm packages used by a repository and identify security, maintenance, and dependency risks.

Goal

Produce a practical package-risk review for the current repository:

• what dependencies are installed
• which ones are direct vs transitive
• which ones look stale, risky, or unnecessary
• whether there are known audit issues
• whether version ranges are too loose or outdated

Scope

Focus on: