npq CLI
npq is an npm-audit CLI whose JSON mode separates the report from dependency installation and never starts the package manager.
- 1,795 ★ on the repository
- Last commit
- Apache-2.0
Extended access
Why this level
- The tool queries registries and external databases, and install mode may proceed to package installation after warnings.
Install
In your terminal, with SkillFoxx CLI
npx skillfoxx add cli/npqDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewExtended accessThe tool runs code or makes network calls and only reads external data.
- The tool queries registries and external databases, and install mode may proceed to package installation after warnings.
This is third-party code. Review the repository files before installing.
What it does
npq is a CLI that checks package signals before installation, including known vulnerabilities, age, authorship, licensing and install scripts. Agents can inspect findings before adding a dependency. Checks use registry and external data sources. JSON audit mode never hands control to the package manager. Install mode eventually delegates to npm or another selected manager; warning handling depends on the execution mode.
Who it is for. JavaScript developers who want a separate review of a dependency before agent-driven installation.
Good fit when
- An agent proposes a package and must first show known issues and publisher details.
- CI needs a machine-readable report without installing the target package.
- A version has changed publisher or install scripts.
- The team audits declared direct project dependencies.
Not a fit when
- You expect a clean result to prove complete package safety.
- Every warning must stop default installation.
- Project audit alone must cover all transitive dependencies.
Example request
Audit the proposed npm package with explicit npq JSON mode and show findings without installing the target package.Limitations
Interactive warning-only results trigger installation after a default 15-second countdown. Detected coding-agent environments can also authorize warning-only installs; use explicit --json for audit without installation. Project mode reads direct package.json dependencies, not lockfiles or the full transitive graph. A clean report means the available checks found nothing, not proof that the package code is harmless.
How to disable. Remove npq from npm wrappers and shell aliases. Already installed packages require separate package-manager removal.
FAQ
Does JSON mode run npm?
No. Explicit `--json` remains audit-only and never invokes the package manager.
How do I require interactive approval?
Use `--disable-auto-continue`, while accounting for separate non-interactive rules.
Why are some checks not evaluated?
The registry may lack the required data, or an external source may need credentials. `not evaluated` means the check was not completed, rather than passed.
Where does vulnerability information come from?
External sources include OSV or configured Snyk, depending on setup.
Does npq replace the package manager?
No. Install mode hands work to the chosen manager after checks.
Discussion
No questions or reviews yet.
Related
CLI toolsA CLI creates and checks signed agent-action receipts, exports audit records and verifies prepared bundles locally.
Security scanner for coding agents: checks code, MCP servers, prompts and model-invented packages, and gives an A to F grade.
A plugin that checks the commands, URLs and file writes an AI agent attempts and blocks the dangerous ones before they run
A static scanner for vulnerabilities in AI agent code and MCP configs with 66 rules mapped to OWASP Agentic Top 10
A security scanner for AI-written code: secrets, dependencies, MCP and CI, findings investigated with evidence, and fixes you approve
The official Socket MCP server scores the security of npm, PyPI, cargo and other dependencies inside an agent chat.
README in short
Custom registries and package-provenance checks are supported. Some information depends on the registry and configured credentials.