Security●●●Banger
Aidevshield NPM audit for AI coding tool workflows
Scans Cursor/Cline/GitHub Actions for prompt injection and supply chain attacks—aidevshield catches real exploits.
Solve My ProblemBig Brain
GrimLabs
103mo ago
Back to browse
GitHub Repository
4 starsGo
FixMyNPM, CLI to fix your insecure npm config
by madospace·May 13, 2026·10 points·0 comments
AI Analysis
●●SolidSolve My ProblemShip It
Incident response mode hunts for bundled .npmrc files in node_modules.
Strengths
- •Incident mode specifically flags suspicious bundled .npmrc files indicating supply chain attacks.
- •Glob matching for packages allows sweeping searches across entire directory trees.
- •Doctor command provides immediate fixes for insecure HTTP registries and disabled SSL.
Weaknesses
- •npm audit and yarn audit already cover many basic security configuration checks.
- •Limited to .npmrc issues misses broader dependency vulnerability scanning capabilities.
Category
Target Audience
Node.js developers and security engineers managing npm configurations
Similar To
npm audit · yarn audit · Snyk
Post Description
With recent issues with npm configuration issues it's essential that we have a tool like this to fix basic issues
Similar Projects
Security●●Solid
DepsGuard – one command to harden NPM/pnpm/yarn/bun/uv configs
One command hardens five package managers when hand-editing configs gets ignored.
Solve My ProblemWizardry
eranation
40612d ago
Developer Tools●Mid
FlowLessAI – NPM I -g vibe-auditor – AI audits your codebase
AI code auditor, but Cursor, Continue, and Copilot already do this inline.
Solve My Problem
mozinovati
103mo ago
Developer Tools●●Solid
Unclog – find and fix Claude Code context bloat
Reclaims wasted context tokens by auditing MCPs and skills before you type.
Solve My ProblemDark HorseShip It
tomchill
301mo ago
Developer Tools●●Solid
Ccmd – TUI to audit and clean developer caches
CVE scanning for cached packages beats plain disk cleanup tools.
Solve My ProblemNiche Gem
julsimon
201mo ago
Security●●●Banger
Scan your dev machine for AI agents, MCP servers, and IDE extensions
Fills the EDR blind spot for AI tooling — timely and actually useful today.
Solve My ProblemDark Horse
varunsharma07
903mo ago