Actions7
Scan npm Package
AI-generatedSummary
Scan an npm package for security threats
Inputs
- npmPackageName (required) — The npm package name to scan
- headless — Whether to run the browser in headless mode
- timeout — Maximum time to wait for scan results in milliseconds (default: 7 minutes)
- disableAI — Whether to disable AI-powered threat analysis
Output shape
object containing package metadata and scan results, including packageName, platform, name, version, status, score, dependencies, threats, scanUrl, and timestamp
Exactly one JSON object per input item; all fields are optional except for packageName and status, and timestamp is an ISO‑8601 string
Examples
Example 1: Scan the lodash package using default settings
npmPackageName: 'lodash'; options: { headless: true, timeout: 420000, disableAI: false }
Example 2: Scan the express package with headless disabled and a 30‑second timeout
npmPackageName: 'express'; options: { headless: false, timeout: 30000, disableAI: true }