rustio rustio.net
48

npm_sentinel

v0.3.0 Experimental

A CLI tool to detect supply chain attacks in npm packages by analyzing lifecycle scripts, dependencies, and registry metadata.

MIT Edition 2021 MSRV 1.74
Development toolsCommand line utilities #security#analysis#malware#npm#supply-chain

Quick Verdict

  • โœ“Actively maintained (updated 52d ago)
  • !Pre-1.0: API may have breaking changes
  • โœ“Permissive license (MIT)

Security

Checking security advisories...
Downloads
105
Dependents
0
Releases
3
Size
25KB

Deep Insights

๐Ÿ“‰
Download decline

13 downloads in the last 30 days, down 32% from the previous period. May indicate migration to alternatives.

๐Ÿ“
Compact crate

At 24KB, npm_sentinel is lightweight. Small crate size correlates with focused, well-scoped functionality.

Health Breakdown

Maintenance 16/25

Recency, release consistency, active ratio

Quality 12/25

Yanked ratio, deps, size, maturity, features

Community 6/20

Reverse deps, ownership, ecosystem

Popularity 2/15

Downloads, momentum, growth trend

Documentation 12/15

Docs, repo, license, metadata

Download Trend

Daily downloads ยท last 90 days
0/day avg
04/265/146/16/197/77/24

Version Adoption

v0.2.0
47%
v0.1.0
29%
v0.3.0
25%

Release Timeline

3 releasessince 2025
J
F
M
A
M
J
J
A
S
O
N
D
2025
2
2026
1
Less
More

README

Loading README...

Maintainers

Dependencies
10
direct dependencies
Dependents
0
crates depend on npm_sentinel

Similar Crates