A small check before a big install.

Package Risk Checker is an independent developer utility that highlights patterns in a package.json worth reviewing before installation or publication.

How it works

The checker parses JSON inside your browser and applies transparent rules to direct dependency declarations, lifecycle scripts, runtime requirements, and publishing configuration. Findings are ranked by review urgency; the score is a prioritization aid, not a security certification.

Editorial standard

Explanations are written for this product and maintained as package tooling changes. We do not reproduce package descriptions, vulnerability feeds, or registry content. Any future advertising will be clearly separated from results and will not influence the score.