Sandworm Audit

Beautiful Security & License Compliance Reports For Your App's Dependencies 🪱

Free & open source command-line tool
Works with any modern JavaScript package manager
Scans your project & dependencies for vulnerabilities, license, and misc issues
Supports workspaces
Outputs:
- JSON issue & license usage reports
- Easy to grok SVG dependency tree & treemap visualizations
  - Powered by D3
  - Overlays security vulnerabilities
  - Overlays package license info
- csv of all dependencies & license info

Running Sandworm Audit

Sandworm treemap and tree dependency charts

Sandworm dependency csv

{
  "createdAt": "...",
  "packageManager": "...",
  "name": "...",
  "version": "...",
  "rootVulnerabilities": [...],
  "dependencyVulnerabilities": [...],
  "licenseUsage": {...},
  "licenseIssues": [...],
  "metaIssues": [...],
  "errors": [...],
}

Using sandworm resolve

Simple HTML visualizations on top of Sandworm data for all existing npm packages are available in beta on sandworm.dev