audit-supply-chain

name	audit-supply-chain
description	Audit JS package.json for sketchy dependencies
matches	{"filename_patterns":["**/package.json"]}

Supply chain audit

Watch for typo-squatted packages and post-install hooks.