io.github.Baneado98

Catch AI-hallucinated (slopsquatted) npm imports in generated code before npm install.

Audit npm dependency licenses for copyleft/source-available/unlicensed conflicts before you ship.

npm supply-chain audit: known CVEs (OSV), typosquatting, malicious scripts — before npm install.