darkdevil3610/NpmJaagratha
GitHub: darkdevil3610/NpmJaagratha
Stars: 1 | Forks: 0
# NpmJaagratha
NpmJaagratha is a lightweight, no-login security dashboard for npm projects. Paste a `package.json` or search packages to get actionable vulnerability and supply-chain insights.
## Key features
- Fast, privacy-first analysis: paste `package.json` content locally (no account required) and receive a version-aware vulnerability summary.
- Live vulnerability feed: curated advisories from NPMSCan/GitHub Advisory Database.
- Package search: explore npm packages and view risk signals.
- Readable results: human-friendly vulnerability cards with OSV links and remediation context.
## Tech stack
- Next.js (App Router)
- React + TypeScript
- Tailwind CSS for styling
- Framer Motion for subtle UI motion
- Lucide React for icons
## Pages
- `/` — Landing page and product overview
- `/search` — Package search UI
- `/feed` — Live vulnerability feed
- `/analyze` — Paste a `package.json` or package name to scan
- `/repository-dashboard` — Scan a public GitHub repository for manifests, sensitive files, and dependency issues
- `/contact` — Contact / LinkedIn
- `/security` — Security reporting guidance
## Server APIs
- `GET /api/npm/search` — npm search proxy
- `GET /api/advisories` — advisories feed proxy
- `POST /api/analyze` — package and `package.json` analysis proxy (server-side)
- `POST /api/repository-dashboard` — public GitHub repository scan proxy
## Quick start
1. Install dependencies
npm install
2. Run the development server
npm run dev
3. Open your browser at the local Next.js URL printed by the dev server.
## Development scripts
- `npm run dev` — development server
- `npm run build` — production build
- `npm run start` — start production server
## Security reporting
If you discover a vulnerability in this project or the analyzer results, please report it privately via the `/security` page or connect on LinkedIn: https://www.linkedin.com/in/gourav-suresh/.
## Project layout (high level)
- `app/` — Next.js App Router pages and API routes (`/app/*`)
- `components/` — UI components and layout pieces
- `lib/` — helper utilities
## License
This repository is provided under the terms of the LICENSE file in the project root.
标签:自动化攻击