Drop an npm lockfile to see its declared layers, missing license fields and install-script flags. Inspect, filter, export.
Files stay in this browser. Choose package-lock.json or package.json.
Scope: This reads fields already in your npm manifest/lockfile. Missing license metadata is not proof of a licensing problem. An install-script flag is not proof of malware. This is not a vulnerability scan, legal review or package verification.