npm-scan-plus 1.0.0 → 1.0.2

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Chris Bunting
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -1,4 +1,4 @@
-# npm-scan 🔒
+# npm-scan-plus 🔒
 
 **Security scanner for npm packages** - Pre and post-install scanning for malicious code, supply chain attacks, and obfuscated code.
 
@@ -17,7 +17,7 @@ These attacks succeed because:
 - Obfuscated code hides malicious intent
 - Typosquatting confuses developers
 
-**npm-scan** was built to automatically detect these threats before they reach your project.
+**npm-scan-plus** was built to automatically detect these threats before they reach your project.
 
 ## Features
 
@@ -43,29 +43,39 @@ These attacks succeed because:
 
 ## Installation
 
+### Option 1: npx (run without installing)
 ```bash
-npm install -g npm-scan
-```
+# Scan a package before installing
+npx npm-scan-plus pre install <package>
 
-Or use without installation:
+# Full automatic wrapper (pre-scan + install + post-scan)
+npx npm-scan-plus-wrap install <package>
+npx npm-scan-plus-wrap install  # install from package.json
+```
 
+### Option 2: Install globally (recommended for frequent use)
 ```bash
-npx npm-scan pre install <package>
+npm install -g npm-scan-plus
+
+# Then use directly
+npm-scan-plus pre install <package>
+npm-scan-plus-wrap install lodash
+npm-scan-plus-wrap install  # install from package.json
 ```
 
 ## Quick Start: Automatic Wrapper
 
-The **recommended way** to use npm-scan is with the automatic wrapper:
+The **recommended way** to use npm-scan-plus is with the automatic wrapper:
 
 ```bash
 # Install a package with automatic pre + post scan
-npm-scan-wrap install lodash
+npm-scan-plus-wrap install lodash
 
 # Install multiple packages
-npm-scan-wrap install lodash axios express
+npm-scan-plus-wrap install lodash axios express
 
 # Install all dependencies from package.json
-npm-scan-wrap install
+npm-scan-plus-wrap install
 ```
 
 The wrapper automatically:
@@ -79,22 +89,22 @@ If you prefer manual control:
 
 ### Pre-install scan
 ```bash
-npm-scan pre install <package>
-npm-scan pre install axios --version 1.6.0
-npm-scan pre install lodash -V  # verbose output
+npm-scan-plus pre install <package>
+npm-scan-plus pre install axios --version 1.6.0
+npm-scan-plus pre install lodash -V  # verbose output
 ```
 
 ### Post-install scan
 ```bash
-npm-scan post
-npm-scan post --folder ./node_modules
+npm-scan-plus post
+npm-scan-plus post --folder ./node_modules
 ```
 
 ### Blocklist management
 ```bash
-npm-scan blocklist list
-npm-scan blocklist add <package>
-npm-scan blocklist remove <package>
+npm-scan-plus blocklist list
+npm-scan-plus blocklist add <package>
+npm-scan-plus blocklist remove <package>
 ```
 
 ## Detection Patterns
@@ -148,3 +158,7 @@ npm run lint
 ## License
 
 MIT
+
+---
+
+Developed by [Chris Bunting](https://github.com/cbuntingde) &lt;cbuntingde@gmail.com&gt;

package/package.json

@@ -1,12 +1,12 @@
 {
   "name": "npm-scan-plus",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Security scanner for npm packages - pre and post-install scanning for malicious code, supply chain attacks, and obfuscated code",
   "main": "dist/lib/index.js",
   "types": "dist/lib/index.d.ts",
   "bin": {
-    "npm-scan": "./bin/npm-scan.js",
-    "npm-scan-wrap": "./bin/npm-scan-wrap"
+    "npm-scan-plus": "./bin/npm-scan.js",
+    "npm-scan-plus-wrap": "./bin/npm-scan-wrap"
   },
   "scripts": {
     "build": "tsc",