ScriptProbe explains npm package install scripts without running them

ScriptProbe explains npm package install scripts without running them

ScriptProbe checks what a software package runs during installation before you add it to your project. It's for developers who want to see what they're allowing onto their computer.

You paste an npm package name and get the install commands with plain-English descriptions. ScriptProbe reads them without running them. It also checks who published the package. Network access alone gets a high warning. A new publishing account alone gets medium. Together, they get critical.

I've kept those cases separate because a download during installation doesn't by itself mean the package is malicious.

The instant check is free and unlimited. You pay $29 once for 30 days of daily checks across your project's dependencies, with email alerts when install behavior or the publishing account changes. how scriptprobe grades these cases Network access without a publishing change: high A new publisher without network access: medium Network access with a new publisher: critical ScriptProbe reserves its critical warning for network access combined with a publishing-account change.