Npm Safe ForDSH

Key features

• 14 agent tools · 22 security checks · integrity-verified deep scans · local SQLite cache
• Core detection is deterministic and local-first
• no package source is sent to an external LLM by default.
• Deep scans reject cross-origin tarballs and enforce archive size, file count, decompression, path, and scanned-text limits.
• Findings are evidence, not a guarantee that a package is safe.