Tom Longson nym

name

npm-pr-review-npm-supply-chain

description

Reviews pull requests for npm supply chain security risks. Use this skill whenever a user asks you to review a PR, check a diff, audit dependency changes, or evaluate whether it's safe to merge — especially when package.json, package-lock.json, or node_modules are involved. Also trigger for questions like "is this PR safe?", "what changed in dependencies?", or "should I approve this?". Even if the PR is about something else, if it touches npm files, run this review. The goal is to catch supply chain attacks, compromised packages, and dangerous postinstall hooks before they reach production.

npm Supply Chain PR Review

You are reviewing a pull request with the lens of npm supply chain security. Even if the PR seems routine, dependency changes are a common vector for sophisticated attacks — including ones where the malicious code runs at install time and self-destructs, leaving no trace.

Your job is to produce a structured security report the author

Yet another simple gauge chart using d3 Inspired by Jake Trent's Codepen snippet

To move the pointer needle, type in following code in you javascript console

needle.moveTo(.25)

	<!doctype html>
	<html lang="en">
	<head>
	<meta charset="utf-8">
	<title>GistRun</title>
	<link rel="stylesheet" href="styles.css">
	</head>
	<body>
	<h1>Hello world!</h1>
	<script src="script.js"></script>

	<template>
	<require from="components/navigation.html"></require>
	<h1>Aurelia Router Demo</h1>
	<navigation router.bind="router" class="primary-navigation"></navigation>
	<div class="page-host">
	<router-view></router-view>
	</div>
	</template>

	<template>
	<require from="components/navigation.html"></require>
	<h1>Aurelia Router Demo</h1>
	<navigation router.bind="router" class="primary-navigation"></navigation>
	<div class="page-host">
	<router-view></router-view>
	</div>
	</template>

	var jsdom = require('jsdom');
	var fs = require('fs');
	var request = require("request");


	var jsdom = require("jsdom");

	jsdom.defaultDocumentFeatures = {
	FetchExternalResources : ['script', 'img', 'css', 'frame', 'link'],
	ProcessExternalResources : ['script', 'img', 'css', 'frame', 'link'],

	var jsdom = require('jsdom');

	jsdom.defaultDocumentFeatures = {
	FetchExternalResources : ['script'],
	ProcessExternalResources : ['script'],
	MutationEvents : '2.0',
	QuerySelector : false
	};

	var htmlDoc = '<html lang="en-US">' +

	.DS_Store
	*.log
	tmp/