depoison

A TypeScript-based CLI tool for scanning Node.js dependencies for security issues like dependency confusion, suspicious install scripts, and typosquatting. Supports npm, yarn, pnpm.