Download
lockfile-lint is a security tool that helps validate npm and Yarn lockfiles to prevent malicious dependency injections. It checks for common security issues such as package integrity violations and unauthorized registry usage.
Features
- Validates npm and Yarn lockfiles for security issues
- Detects unauthorized registries to prevent supply chain attacks
- Checks package integrity by verifying package sources
- Supports CI/CD pipelines for automated security enforcement
- Lightweight and fast execution with minimal overhead
- Helps enforce security policies by restricting dependency sources
Project Samples
Categories
Package ManagersLicense
Apache License V2.0Follow lockfile linting
Other Useful Business Software
Build Securely on Azure with Proven Frameworks
Moving to the cloud brings new challenges. How can you manage a larger attack surface while ensuring great network performance? Turn to Fortinet’s Tested Reference Architectures, blueprints for designing and securing cloud environments built by cybersecurity experts. Learn more and explore use cases in this white paper.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of lockfile linting!
