npm / yarn / pnpm supply-chain audit Read-only audit of the workspace root. Do not modify any files. 0. Detect package manager test -f package.json || { echo "STOP: no package.json at workspace root" ; exit 1 ; } jq -r '.packageManager // "unset"' package.json ls -1 yarn.lock package-lock.json pnpm-lock.yaml 2
/dev/null || true If no package.json , stop. Priority: packageManager → lockfile → default npm. 1. Tool version Show more Installs 865 Repository grafana/skills GitHub Stars 219 First Seen Jul 10, 2026 Security Audits Gen Agent Trust Hub Pass Socket Pass Snyk Pass