NPM.SupplyChain (NPM v0.6.0)

Evaluates supply chain security posture of a project's dependencies.

Combines multiple signals: provenance, integrity, deprecations, phantom deps, and package age.

Summary

Assesses supply chain risk.

Formats assessment for display.

Computes a risk score (0-100, lower is better).

@spec assess(map(), map()) :: map()

Assesses supply chain risk.

@spec format(map()) :: String.t()

Formats assessment for display.

@spec risk_score(map()) :: non_neg_integer()

Computes a risk score (0-100, lower is better).