# NPM Package Audit Reference

> Provides deep dependency analysis using npm audit, socket.dev API for supply chain risk scoring, and bundlephobia API for bundle size impact assessment. Generates license compliance reports via license-checker.

- Skill: `agentskillexchange/npm-package-audit-reference` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/npm-package-audit-reference`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/npm-package-audit-reference/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/npm-package-audit-reference

---


# NPM Package Audit Reference

Provides deep dependency analysis using npm audit, socket.dev API for supply chain risk scoring, and bundlephobia API for bundle size impact assessment. Generates license compliance reports via license-checker.

## Installation

Use the upstream install or setup path that matches your environment:
- npm-audit | npm Docs Skip to search Skip to content
- npm Docs
- npm package scope, access level, and visibility
- Docker and private modules

Requirements and caveats from upstream:
- Downloading and installing Node.js and npm
- Try the latest stable version of node
- Creating Node.js modules

Basic usage or getting-started notes:
- Creating a strong password
- Receiving a one-time password over email
- About two-factor authentication

- Source: https://docs.npmjs.com/cli/v10/commands/npm-audit/

## Documentation

- https://docs.npmjs.com/cli/v10/commands/npm-audit/

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/npm-package-audit-reference/)