A capability-aware supply-chain scanner for npm. Diffs each dependency's capability surface against a reviewed baseline and fails CI on escalation. Zero dependencies, offline. - View it on GitHub