npm

package

v0.2.1 Latest Latest Go to latest Published: Mar 2, 2026 License: Apache-2.0 Imports: 9 Imported by: 0

Details

Package npm provides the npm/Node.js ecosystem plugin.

This section is empty.

This section is empty.

This section is empty.

type Plugin struct{}

Plugin implements the npm ecosystem.

func (p *Plugin) Detect(ctx context.Context, path string) bool

Detect checks if this is an npm project with a scannable lock file.

func (p *Plugin) GetFix(ctx context.Context, pkg ecosystem.Package, vuln ecosystem.Vulnerability) (*ecosystem.FixAction, error)

GetFix returns the npm command to fix a vulnerability.

func (p *Plugin) Info() ecosystem.PluginInfo

Info returns plugin metadata.

func (p *Plugin) NativeAudit(ctx context.Context, path string) (*ecosystem.ScanResult, error)

NativeAudit runs npm audit and returns findings.

func (p *Plugin) Scan(ctx context.Context, path string) (*ecosystem.ScanResult, error)

Scan parses package-lock.json and checks for vulnerabilities.