lockfile-lint is a security tool that helps validate npm and Yarn lockfiles to prevent malicious dependency injections. It checks for common security issues such as package integrity violations and unauthorized registry usage.

Features

  • Validates npm and Yarn lockfiles for security issues
  • Detects unauthorized registries to prevent supply chain attacks
  • Checks package integrity by verifying package sources
  • Supports CI/CD pipelines for automated security enforcement
  • Lightweight and fast execution with minimal overhead
  • Helps enforce security policies by restricting dependency sources

Project Samples

Project Activity

See All Activity >

Categories

Package Managers

License

Apache License V2.0

Follow lockfile linting

lockfile linting Web Site

Other Useful Business Software
Go from Code to Production URL in Seconds Icon
Go from Code to Production URL in Seconds

Cloud Run deploys apps in any language instantly. Scales to zero. Pay only when code runs.

Skip the Kubernetes configs. Cloud Run handles HTTPS, scaling, and infrastructure automatically. Two million requests free per month.
Try it free
Rate This Project
Login To Rate This Project

User Reviews

Be the first to post a review of lockfile linting!

Additional Project Details

Operating Systems

Linux, Mac, Windows

Programming Language

JavaScript

Related Categories

JavaScript Package Managers

Registered

2025-02-28