NPMscan/npmscan-action: Catch risky npm dependency changes before they merge

NPMscan has released npmscan-action, a free GitHub Action designed to catch risky npm dependency changes before pull requests are merged. The tool scans package.json and lockfiles for known vulnerabilities, malware, sudden install scripts, and repointed lockfile entries without requiring an API key or account. Open article →