Zero-dependency npm supply chain security tool. Catches ghost dependencies, scores install script behavior, and detects attacks before any advisory exists.

A Yarn plugin that diagnoses compatibility issues exposed by PnP and other strict Yarn environments, then explains and optionally remediates them with safe, explicit fixes.