npm-safe
Local-first npm supply-chain security scanner: static + optional LLM analysis, CLI/CI gates, desktop app, and AI-agent skills
What XERJ indexed
Selected work
“repair install gate execution and validation”. 20 files, 2,763 lines in packages/core, packages/desktop.
Licence
The repository
LICENSE file checked at the pinned commit; the author agreed to inclusion.
The XERJ corpus
The author agreed by email on 2026-11-01. Same terms as the repository. Answers name the repo, the commit and the file:line.
selected for the XERJ Corpus Hublicence clearedsuggested use: adapt with attribution
clidesktop-appllmneutralinojsnpmscannersecuritysqlite
Example questions
- How does npm-safe implement cli?
- Where does npm-safe handle “repair install gate execution and validation”?
- What does packages/core do in npm-safe?
The prompt
Paste it into your AI agent. It clones nisconder/npm-safe at the pinned commit and indexes it on your machine.
Search the GitHub repository nisconder/npm-safe with XERJ (https://hub.xerj.org/corpus/nisconder--npm-safe). Run these in a shell, in order, and check each result before the next: 1. xerj --help (success: it prints usage). If xerj is missing: curl -fsSL https://xerj.org/get | sh 2. git clone https://github.com/nisconder/npm-safe npm-safe && git -C npm-safe checkout 2894f4baf96293f2c8cad9b980f853b735829bc4 3. Start a local node and leave it running: xerj --insecure --data-dir ./xerj-data 4. xerj autoindex ./npm-safe --url http://127.0.0.1:9200 --prefix npm-safe --progress plain 5. xerj autoindex map --url http://127.0.0.1:9200 Then answer my question from the indexed files and cite the ax_path of every hit. Query syntax: https://xerj.org/llms.txt Licence: Apache-2.0. Keep the copyright notice and credit the authors.
Related
NisconderAI, prompts and agents corporaghsa-dbowasp-cheatsheetsexploit-pocs-2023ilyasbozdemir/workdesk-360Tyomich4736/Open-Tickprofullstack/threatcrush
Selected work and consent: the XERJ registry.