Skip to main content
Supply chain tools

Supply chain / FREE TOOL

npm configuration review

Catch the quiet configuration risks: insecure registries, disabled TLS checks, and credentials with overly broad scope.

Local review / optional AI

01 Your input

Local processing only. Maximum file size: 2 MB.

02 Your results

A closer look starts here.

Add your input and run the check. We will show the observations and explain what needs review.

 

A QUICK WALKTHROUGH

How to use it

  1. 01Paste an .npmrc file, preferably with token values removed.
  2. 02Review transport and authentication settings.
  3. 03Check effective configuration in your actual build environment.

What this check can tell you

Reviews this file only. Environment variables, user configuration, command-line overrides, and npm version can change effective behavior. Credential values are omitted from results.

The initial review processes files in this tab. If you choose the optional AI summary, the displayed findings are sent to Cloudflare AI; your raw file, result tables and decoded token claims are excluded.

npm configuration and credential scoping
All tools