⟳ Репост от Lope

🧾 Introducing npm.tax Estimate the probability of being impacted by a breach in your npm supply chain. Adjust the knobs to see how slimming your node_modules lowers your risk. Look up a package to see its own risk profile, then share the report, e.g. npm.tax?direct=59&tr.... What's your npm tax?

npm.tax: npm supply-chain risk explorerExplore how your code, npm dependency count, breach probability, and time horizon combine into cumulative supply-chain risk.npm.tax