Repository profile

NPMscan / npmscan-action

Catch risky npm dependency changes before they merge.

  • dependency-analysis
  • devsecops
  • github-actions
  • malware
  • npm
  • npm-security
  • security
  • supply-chain
TypeScriptView on GitHub

Why this project

  • Positive GitHub star additions in 8 of 10 daily intervals.
  • 2 active contributors, 106 commits and 1 merged PRs in four complete weeks.
Recommendation evidence

github_star_history · 2026-10-23T00:00:00+00:00 to 2026-11-02T00:00:00+00:00 · potential-v1

GitHub calendar-day additions, not sampled net growth; provider days may differ from UTC.

Showing the last complete activity period while new data is collected.

Discovery signals are not a prediction of quality or future success.

Repository overview

Public GitHub metrics and OpenPulse observations
GitHub stars521
Public forks0
Activity · 4 weeks
High activity84/100

Showing the last complete activity period while new data is collected.

Growth · 24h+3 stars
Growth · 7d+253 stars
Growth · 30d+519 stars

Repository activity

Four complete UTC weeks · 2026-09-27 to 2026-10-25
Commits106
Merged pull requests1
Active contributors2

Relative score across tracked public repositories with complete data. It describes recent activity, not project quality. Updated .

AI-attributed commits Pilot

Not yet analyzed · hot-project pilot

—

Share of checked commits with explicit AI attribution, not the share of AI-generated code.

View basis

Based on explicit public attribution in recent default-branch commits. Not the percentage of AI-generated code; unmarked use cannot be detected.

Star activity

Last 7 days
26 Oct8 observed days · gaps preserved02 Nov

Observed star growth

Samples or dated GitHub history
24h +3 stars Measured from observations 01 Nov 2026 → 02 Nov 2026
7d +253 stars Measured from observations 26 Oct 2026 → 02 Nov 2026
30d +519 stars GitHub history · as of 2026-11-01 03 Oct 2026 → 02 Nov 2026