Checkpoint

Checkpoint scans package.json declarations and npm, pnpm, and Yarn lockfiles for packages associated with known supply-chain infections. It has no dependencies and runs locally.

Quick start

npm install --global @vx.rs/checkpoint
checkpoint

The command scans the current directory recursively. Use another directory or replace the packaged data with one or more local lists:

checkpoint --dir ../project
checkpoint --data ./packages.json
checkpoint --data ./campaign-a.json,./campaign-b.json

See usage, data format, and development for details.